CVE-2020-7301CWE-79

DLP ePO extension - Cross site scripting

Medium · published August 12, 2020

CVSS v3.1
4.1
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-08-12T22:10Z
EPSS history
Timeline
  • 12 AUG 22:10Z
    DLP ePO extension - Cross site scripting
    cvelistv5