NetSight
medium4.1

CVE-2020-7303

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to ru…

Impact

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.

Affected products

VendorProductAffected versions
McafeeData Loss Prevention
from 11.3.0 before 11.3.28
from 11.4.0 before 11.4.200
from 11.5.0 before 11.5.3

Weakness classification

References