Lucene search

[email protected]NVD:CVE-2017-4015

HistoryMay 17, 2017 - 9:29 p.m.

CVE-2017-4015

2017-05-1721:29:00

CWE-1021

[email protected]

web.nvd.nist.gov

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

Affected configurations

NVD

Node

mcafeenetwork_data_loss_preventionRange≤9.3.0

References

www.securitytracker.com/id/1038523

kc.mcafee.com/corporate/index?page=content&id=SB10198

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

Related for NVD:CVE-2017-4015

cvelist1 ibm1 prion1 cve1