Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:37
Type | Values Removed | Values Added |
---|---|---|
References | () https://kc.mcafee.com/corporate/index?page=content&id=SB10326 - | |
CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 4.1 |
07 Nov 2023, 03:25
Type | Values Removed | Values Added |
---|---|---|
References | () https://kc.mcafee.com/corporate/index?page=content&id=SB10326 - |
Information
Published : 2020-08-12 22:15
Updated : 2024-11-21 05:37
NVD link : CVE-2020-7301
Mitre link : CVE-2020-7301
CVE.ORG link : CVE-2020-7301
JSON object : View
Products Affected
mcafee
- data_loss_prevention
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')