CVE-2020-7301
4.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Summary
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| McAfee | DLP ePO extension | 11.3 < 11.3.28 | affected |
| McAfee | DLP ePO extension | 11.4 < 11.4.200 | affected |
| McAfee | DLP ePO extension | 11.5 < 11.5.3 | affected |
Weaknesses
- CWE-79: CWE-79 Cross-site Scripting (XSS)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.