CVE-2020-7303CWE-79

DLP ePO extension - Cross-site scripting

Medium · published August 13, 2020

CVSS v3.1
4.1
EPSS
0%
Percentile
36.9
In the wild
Unconfirmed
What it is

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2020-08-13T02:55Z
EPSS history
Timeline
  • 13 AUG 02:55Z
    DLP ePO extension - Cross-site scripting
    cvelistv5