Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mcafee data loss prevention endpoint vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2017-3948
Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session.
Mcafee Data Loss Prevention Endpoint 10.0
Mcafee Data Loss Prevention Endpoint 10.0.100
Mcafee Data Loss Prevention Endpoint 10.0.230
Mcafee Data Loss Prevention Endpoint 10.0.200
Mcafee Data Loss Prevention Endpoint 10.0.250
7.8
CVSSv3
CVE-2021-23887
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.100 allows a local, low privileged, malicious user to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying th...
Mcafee Data Loss Prevention Endpoint
5.5
CVSSv3
CVE-2021-23886
Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.100 allows a local, low privileged, malicious user to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlpho...
Mcafee Data Loss Prevention Endpoint
NA
CVE-2015-2757
The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corruption) via unspecified vectors.
Mcafee Data Loss Prevention Endpoint
NA
CVE-2015-2759
Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote malicious users to hijack the authentication of users for requests that (1) obtain sensitive info...
Mcafee Data Loss Prevention Endpoint
7.8
CVSSv3
CVE-2016-8012
Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get.
Mcafee Data Loss Prevention Endpoint
7.8
CVSSv3
CVE-2018-6689
Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows malicious users to bypass local security protection via specific conditions.
Mcafee Data Loss Prevention Endpoint
NA
CVE-2015-2758
The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL.
Mcafee Data Loss Prevention Endpoint
NA
CVE-2015-2760
Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Mcafee Data Loss Prevention Endpoint
6.1
CVSSv3
CVE-2021-31848
Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension before 11.7.100 allows a remote malicious user to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the cas...
Mcafee Data Loss Prevention Endpoint
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »