Data Loss Prevention Endpoint Security Vulnerabilities and Issues — Data Loss Prevention Endpoint CVE List

Lucene search

McafeeData Loss Prevention Endpoint

8 matches found

cve•added 2015/03/27 2:59 p.m.•57 views

CVE-2015-2760

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00185EPSS

cve•added 2015/03/27 2:59 p.m.•55 views

CVE-2015-2757

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corruption) via unspecified vectors.

4CVSS6.4AI score0.00403EPSS

cve•added 2015/02/17 3:59 p.m.•51 views

CVE-2015-1618

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL.

4CVSS6AI score0.00176EPSS

cve•added 2015/03/27 2:59 p.m.•49 views

CVE-2015-2758

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL.

6.5CVSS6.6AI score0.00391EPSS

cve•added 2015/02/06 3:59 p.m.•46 views

CVE-2015-1305

McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.

6.9CVSS6.6AI score0.00573EPSS

cve•added 2015/02/17 3:59 p.m.•43 views

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors.

6.5CVSS8.1AI score0.00311EPSS

cve•added 2015/03/27 2:59 p.m.•40 views

CVE-2015-2759

Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote attackers to hijack the authentication of users for requests that (1) obtain sensitive information or (2) modify the d...

6.8CVSS7.1AI score0.00116EPSS

cve•added 2015/02/17 3:59 p.m.•39 views

CVE-2015-1617

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5CVSS5.3AI score0.00185EPSS