CVE-2020-7301

MEDIUM

McAfee Data Loss Prevention < 11.3.28 - Authenticated Cross-Site Scripting via File Upload Tab

Title source: llm
STIX 2.1

Description

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.

References (1)

Core 1
Core References

Scores

CVSS v3 4.1
EPSS 0.0044
EPSS Percentile 63.6%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
mcafee/data_loss_prevention 11.3.0 - 11.3.28
Published Aug 12, 2020
Tracked Since Feb 18, 2026