network data loss prevention vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack.

Mcafee Network Data Loss Prevention 9.3.2 Mcafee Network Data Loss Prevention 9.3.3 Mcafee Network Data Loss Prevention 9.3.4 Mcafee Network Data Loss Prevention 9.3.0 Mcafee Network Data Loss Prevention 9.3.1

5

CVSSv2

McAfee Network Data Loss Prevention (NDLP) prior to 9.3 allows remote malicious users to obtain sensitive information via vectors related to open network ports.

Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention 8.6 Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.1

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) prior to 9.3 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.

Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.1 Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention 8.6

2.1

CVSSv2

McAfee Network Data Loss Prevention (NDLP) prior to 9.3 allows local users to obtain sensitive information by reading a Java stack trace.

Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention 9.2.1 Mcafee Network Data Loss Prevention 8.6

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) prior to 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.1 Mcafee Network Data Loss Prevention 8.6

7.5

CVSSv2

The MySQL database in McAfee Network Data Loss Prevention (NDLP) prior to 9.3 does not require a password, which makes it easier for remote malicious users to obtain access.

Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention 8.6 Mcafee Network Data Loss Prevention 9.2.1

5

CVSSv2

McAfee Network Data Loss Prevention (NDLP) prior to 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote malicious users to obtain sensitive information via unspecified vectors.

Mcafee Network Data Loss Prevention 9.2.1 Mcafee Network Data Loss Prevention 8.6 Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.0

5

CVSSv2

McAfee Network Data Loss Prevention (NDLP) prior to 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie.

Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention 8.6 Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.1

3.6

CVSSv2

McAfee Network Data Loss Prevention (NDLP) prior to 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."

Mcafee Network Data Loss Prevention 9.2.0 Mcafee Network Data Loss Prevention 8.6 Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.1

2.1

CVSSv2

McAfee Network Data Loss Prevention (NDLP) prior to 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.

Mcafee Network Data Loss Prevention 8.6 Mcafee Network Data Loss Prevention Mcafee Network Data Loss Prevention 9.2.1 Mcafee Network Data Loss Prevention 9.2.0

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook