CVE-2015-2757 — Data Loss Prevention Endpoint vulnerability

CWE-3993 documents3 sources

Severity

4.0MEDIUMNVD

EPSS

0.4%

top 39.07%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mcafee Data Loss Prevention Endpoint

Timeline

PublishedMar 27

Latest updateMay 17

Description

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corruption) via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmcafee/data_loss_prevention_endpoint9.3.400

🔴Vulnerability Details

GHSA

GHSA-5v8r-4fr5-2xhf: The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9↗2022-05-17

▶

CVEList

CVE-2015-2757: The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9↗2015-03-27

▶