McAfee Data Loss Prevention Endpoint Access Control Error Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...

PT-2019-3087

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint versions prior to 11.3.0 Description The issue is related to insufficient argument validation in a command, which can be exploited to execute arbitrary code. This can be achieved through a specially crafted...

PT-2018-17714 · Mcafee · Mcafee Data Loss Prevention Endpoint

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention Endpoint DLPe versions 10.0.x through 10.0.509 McAfee Data Loss Prevention Endpoint DLPe versions 11.0.x through 11.0.599 Description: The issue allows attackers to bypass local security protection under specific...

CVE-2018-6689: Improper Authentication

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint DLPe 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions...

CVE-2017-3948: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...

PT-2017-16172

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLP Endpoint versions 10.0.x Description The issue allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session, specifically through...

PT-2017-9461

Name of the Vulnerable Software and Affected Versions Intel Security Data Loss Prevention Endpoint DLPe versions 9.3.600 through 9.4.200 Description The issue allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process...

CVE-2016-8012: Undefined Security Weakness

Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...

PT-2016-5792

Name of the Vulnerable Software and Affected Versions McAfee Active Response MAR versions prior to 1.1.0.161 McAfee Agent MA 5.x versions prior to 5.0.2 Hotfix 1110392 5.0.2.333 McAfee Data Exchange Layer 2.x DXL versions prior to 2.0.1.140.1 McAfee Data Loss Prevention Endpoint DLPe 9.3 versions...

McAfee Data Loss Prevention Endpoint EPO Extended Information Disclosure Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A security vulnerability in the McAfee Data Loss Prevention Endpoint DLPe epo extension allows remote attackers to submit a special URL request to obtain sensitive...

CVE-2015-2760

CVE-2015-2760 is an XSS vulnerability in the McAfee DLPe ePO extension prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the ePO extension of DLPe. Affected product/version: McAfee Data Loss Pr...

CVE-2015-2758

The CVE-2015-2758 entry affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3 Patch 4 Hotfix 16 (9.3.416.4). The vulnerability allows remote authenticated users to obtain sensitive information, modify the database, or cause other unspecified impact via a crafted URL. ...

PT-2015-5876

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3 Patch 4 Hotfix 16 9.3.416.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-5874

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3 Patch 4 Hotfix 16 9.3.416.4 Description The issue allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact...

PT-2015-5873

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3 Patch 4 Hotfix 16 9.3.416.4 Description The issue allows remote authenticated users to cause a denial of service, potentially resulting in database lock or license corruption, via...

PT-2015-5875

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3 Patch 4 Hotfix 16 9.3.416.4 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the ePO extension. These vulnerabilities allow remote...

CVE-2015-2757: Undefined Security Weakness

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to cause a denial of service database lock or license corruption via unspecified vectors...

CVE-2015-2758: Undefined Security Weakness

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL...

CVE-2015-2760: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2759: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allow remote attackers to hijack the authentication of users for requests that 1 obtain sensitive information or 2 modify the database...