4 matches found
CVE-2026-115740
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the specified file path, causi...
CVE-2026-115740
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the specified file path, causi...
EUVD-2026-117545
Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix parameter in the OpenEventEvidenceFile.do endpoint accepts arbitrary UNC paths without validation. The server-side code attempts to open the specified file path, causi...
CVE-2026-115740
A Server-Side Request Forgery (SSRF) vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier. The flaw resides in the OpenEventEvidenceFile.do endpoint, where the Prefix parameter fails to validate arbitrary UNC paths. An attacker can provide a malicious UNC path, causing t...