Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: McAfee DLP ePO extension 11.3.28, 11.4.200, 11.5.3 Clear all filters
TI-2020-05906 CVE-2020-7301 · GHSA-h9c3-fqhh-r29h

DLP ePO extension - Cross site scripting

Priority LOW 22

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.0051 Published 2020-08-12 Fixed in 11.3.28, 11.4.200 +1 CWE-79
TI-2020-05905 CVE-2020-7300 · GHSA-hm32-9qcf-v83q

DLP ePO extension - Improper Authorization

Priority LOW 29

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via caref…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00595 Published 2020-08-12 Fixed in 11.3.28, 11.4.200 +1 CWE-863