NetSight
medium5.4

CVE-2017-3933

Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential…

Impact

Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack.

Affected products

VendorProductAffected versions
McafeeNetwork Data Loss Prevention
Versions 9.3.0, 9.3.1, 9.3.2, 9.3.3, 9.3.4

Weakness classification

References