CVE-2017-3934: Exposure of Sensitive Information to an Unauthorized Actor

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

Design/Logic Flaw

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header...

CVE-2017-4016

CVE-2017-4016 affects McAfee Network Data Loss Prevention (NDLP) 9.3.x. The Web server allows information disclosure through HTTP response headers, enabling remote attackers to reveal additional vulnerabilities via the header leakage. CVSS data indicates network access with low privileges and par...

CVE-2017-4017: Exposure of Sensitive Information to an Unauthorized Actor

User Name Disclosure in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote attackers to view user information via the appliance web interface...