Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mcafee data loss prevention vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2015-1618
The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL.
Mcafee Data Loss Prevention Endpoint
7.2
CVSSv2
CVE-2021-23887
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows before 11.6.100 allows a local, low privileged, malicious user to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying th...
Mcafee Data Loss Prevention Endpoint
5
CVSSv2
CVE-2017-3935
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content...
Mcafee Network Data Loss Prevention
4.3
CVSSv2
CVE-2017-4011
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote malicious users to get session/cookie information via modification of the HTTP request.
Mcafee Network Data Loss Prevention
3.5
CVSSv2
CVE-2017-4015
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.
Mcafee Network Data Loss Prevention
5
CVSSv2
CVE-2017-4017
User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote malicious users to view user information via the appliance web interface.
Mcafee Network Data Loss Prevention
6.5
CVSSv2
CVE-2021-31849
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension before 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.
Mcafee Data Loss Prevention Endpoint
4.4
CVSSv2
CVE-2019-3595
Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x before 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially c...
Mcafee Data Loss Prevention Endpoint
4
CVSSv2
CVE-2015-2757
The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corruption) via unspecified vectors.
Mcafee Data Loss Prevention Endpoint
6.5
CVSSv2
CVE-2015-2758
The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL.
Mcafee Data Loss Prevention Endpoint
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »