Cross site scripting

2017-06-2313:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.8%

JSON

Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user’s browsing session.

CPENameOperatorVersion
data_loss_prevention_endpointeq10.0.250
data_loss_prevention_endpointeq10.0.100
data_loss_prevention_endpointeq10.0
data_loss_prevention_endpointeq10.0.230
data_loss_prevention_endpointeq10.0.200

Name	Operator	Version
data_loss_prevention_endpoint	eq	10.0.250
data_loss_prevention_endpoint	eq	10.0.100
data_loss_prevention_endpoint	eq	10.0
data_loss_prevention_endpoint	eq	10.0.230
data_loss_prevention_endpoint	eq	10.0.200

References

kc.mcafee.com/corporate/index?page=content&id=SB10202

0.001 Low

EPSS

Percentile

21.8%

JSON

Related for PRION:CVE-2017-3948