CVE-2020-7303

MEDIUM

McAfee Data Loss Prevention 11.3.0-11.3.28 - Authenticated Stored Cross-Site Scripting via Label Addition

Title source: llm
STIX 2.1

Description

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.

References (1)

Core 1
Core References

Scores

CVSS v3 4.1
EPSS 0.0013
EPSS Percentile 32.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
mcafee/data_loss_prevention 11.3.0 - 11.3.28
Published Aug 13, 2020
Tracked Since Feb 18, 2026