DL
Product
Data Loss Prevention Endpoint
26
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 10Low 0
Watch
Add Data Loss Prevention Endpoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6664 | 8.8 | May 25 | Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows… Affected: before 10.0.500; before 11.0.400 |
| CVE-2019-3622 | 8.2 | Jul 24 | Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to… Affected: 11.0 before 11.1.200; 11.2.000 before 11.3.0 |
| CVE-2021-23887 | 7.8 | Apr 15 | Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary… Affected: before 11.6.100.41 |
| CVE-2018-6689 | 7.8 | Oct 3 | Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local… Affected: 10.0.0 before 10.0.510; 11.0.0 before 11.0.600 |
| CVE-2016-8012 | 7.8 | Mar 14 | Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject… Affected: 9.3.0 through 9.3.600; 9.4.0 through 9.4.200 |
| CVE-2018-6683 | 7.4 | Jul 23 | Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows… Affected: before 10.0.505; before 11.0.405 |
| CVE-2021-31844 | 7.3 | Sep 17 | A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated… Affected: before 11.6.200 |
| CVE-2021-31849 | 7.2 | Nov 1 | SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary… Affected: 11.6.0 before 11.6.400; 11.7.0 before 11.7.100 |
| CVE-2022-2330 | 6.5 | Aug 30 | Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local… Affected: before 11.6.600.212; 11.9.0 before 11.9.100 |
| CVE-2019-3595 | 6.5 | Jul 24 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated… Affected: 11.0 before 11.1.200; 11.2.000 before 11.3.0 |
| CVE-2019-3621 | 6.2 | Jul 25 | Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen… Affected: 11.0 before 11.1.200; 11.2.000 before 11.3.0 |
| CVE-2021-31848 | 6.1 | Nov 1 | Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator… Affected: 11.6.0 before 11.6.400; 11.7.0 before 11.7.100 |
| CVE-2019-3591 | 6.1 | Jul 24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in ePO extension in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows… Affected: 11.0 before 11.1.200; 11.2.000 before 11.3.0 |
| CVE-2021-23886 | 5.5 | Apr 15 | Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through… Affected: before 11.6.100.41 |
| CVE-2019-3634 | 5.5 | Aug 21 | Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via an encrypted… Affected: 11.3.0 before 11.3.2.82 |
| CVE-2019-3633 | 5.5 | Aug 21 | Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully… Affected: 11.3.0 before 11.3.2.82 |
| CVE-2017-3948 | 5.4 | Jun 23 | Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script… Affected: 10.0; 10.0.100; 10.0.200; 10.0.230; 10.0.250 |
| CVE-2016-3984 | 5.1 | Apr 8 | The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL)… Affected: through 9.3.0; through 9.4.0 |
| CVE-2015-2760 | – | Mar 27 | Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated… Affected: through 9.3.400 |
| CVE-2015-2759 | – | Mar 27 | Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow… Affected: through 9.3.400 |
| CVE-2015-2758 | – | Mar 27 | The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify… Affected: through 9.3.400 |
| CVE-2015-2757 | – | Mar 27 | The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database… Affected: through 9.3.400 |
| CVE-2015-1618 | – | Feb 17 | The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL Affected: through 9.3.300 |
| CVE-2015-1617 | – | Feb 17 | Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary… Affected: through 9.3.300 |
| CVE-2015-1616 | – | Feb 17 | SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL… Affected: through 9.3.300 |
| CVE-2015-1305 | – | Feb 6 | McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1)… Affected: through 9.3.300 |
Showing 26