CVE-2015-1617 — Cross-site Scripting in Data Loss Prevention Endpoint

CWE-79 — Cross-site Scripting3 documents3 sources

Severity

3.5LOWNVD

EPSS

0.2%

top 59.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mcafee Data Loss Prevention Endpoint

Timeline

PublishedFeb 17

Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDmcafee/data_loss_prevention_endpoint9.3.300

🔴Vulnerability Details

GHSA

GHSA-hxw7-47qh-jrfm: Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9↗2022-05-17

▶

CVEList

CVE-2015-1617: Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9↗2015-02-17

▶