mcafee data loss prevention endpoint vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session.

Mcafee Data Loss Prevention Endpoint 10.0 Mcafee Data Loss Prevention Endpoint 10.0.100 Mcafee Data Loss Prevention Endpoint 10.0.230 Mcafee Data Loss Prevention Endpoint 10.0.200 Mcafee Data Loss Prevention Endpoint 10.0.250

6.5

CVSSv2

SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension before 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.

Mcafee Data Loss Prevention Endpoint

7.2

CVSSv2

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.100 allows a local, low privileged, malicious user to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying th...

Mcafee Data Loss Prevention Endpoint

4.6

CVSSv2

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows malicious users to bypass local security protection via specific conditions.

Mcafee Data Loss Prevention Endpoint

3.5

CVSSv2

Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension before 11.7.100 allows a remote malicious user to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the cas...

Mcafee Data Loss Prevention Endpoint

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Mcafee Data Loss Prevention Endpoint

4.6

CVSSv2

Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get.

Mcafee Data Loss Prevention Endpoint

6.5

CVSSv2

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors.

Mcafee Data Loss Prevention Endpoint

4

CVSSv2

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL.

Mcafee Data Loss Prevention Endpoint

4

CVSSv2

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corruption) via unspecified vectors.

Mcafee Data Loss Prevention Endpoint

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook