CVE-2022-2330

Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully constructed XML file, which the DLP Agent...

CVE-2022-2330 XXE vulnerability in DLP Endpoint for Windows

Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully constructed XML file, which the DLP Agent...

CVE-2022-2330

CVE-2022-2330 affects McAfee DLP Endpoint for Windows (versions prior to 11.9.100 and 11.6.600). The issue is an improper restriction of XML External Entity references (XXE), allowing a remote attacker to cause the DLP Agent to access a local service the attacker wouldn’t normally access via a sp...