CVE-2020-7304

HIGH

McAfee Data Loss Prevention < 11.3.28 - Authenticated Cross-Site Request Forgery via Label Addition

Title source: llm
STIX 2.1

Description

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

References (1)

Core 1
Core References

Scores

CVSS v3 7.6
EPSS 0.0009
EPSS Percentile 25.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Details

CWE
CWE-352
Status published
Products (1)
mcafee/data_loss_prevention 11.3.0 - 11.3.28
Published Aug 13, 2020
Tracked Since Feb 18, 2026