CVE-2017-3948

2017-06-2313:00:00

intel

www.cve.org

0.001 Low

EPSS

Percentile

21.8%

JSON

Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user’s browsing session.

CNA Affected

[
  {
    "product": "Data Loss Prevention Endpoint (DLPe)",
    "vendor": "McAfee",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.x"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10202

0.001 Low

EPSS

Percentile

21.8%

JSON

Related for CVELIST:CVE-2017-3948