ND
Product
Network Data Loss Prevention
31
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 8Low 0
Watch
Add Network Data Loss Prevention to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3968 | 9.1 | Jun 13 | Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5… Affected: before 9.3.4.1.5 |
| CVE-2017-4014 | 8.0 | May 17 | Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via… Affected: through 9.3.0 |
| CVE-2017-3935 | 7.5 | Oct 31 | Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially… Affected: through 9.3.0 |
| CVE-2017-4012 | 6.5 | May 17 | Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via… Affected: through 9.3.0 |
| CVE-2017-4011 | 6.1 | May 17 | Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information… Affected: through 9.3.0 |
| CVE-2017-3934 | 5.9 | Oct 31 | Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to… Affected: through 9.3.0 |
| CVE-2017-3933 | 5.4 | Oct 31 | Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a… Affected: 9.3.0; 9.3.1; 9.3.2; 9.3.3; 9.3.4 |
| CVE-2017-4017 | 5.3 | May 17 | User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface Affected: through 9.3.0 |
| CVE-2017-4016 | 5.3 | May 17 | Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header Affected: through 9.3.0 |
| CVE-2017-4013 | 5.3 | May 17 | Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header Affected: through 9.3.0 |
| CVE-2017-4015 | 4.5 | May 17 | Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP… Affected: through 9.3.0 |
| CVE-2014-8537 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading the logs Affected: through 9.2.1; 8.6; 9.2.0 |
| CVE-2014-8536 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages Affected: through 9.2.1; 8.6; 9.2.0 |
| CVE-2014-8535 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors Affected: through 9.2.1; 8.6; 9.2.0 |
| CVE-2014-8534 | – | Oct 29 | Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to cause a denial of service via a crafted value in the… Affected: through 9.2.1; 8.6; 9.2.0 |
| CVE-2014-8533 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8532 | – | Oct 29 | Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows local users to obtain sensitive information and impact integrity via unknown… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8531 | – | Oct 29 | The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8530 | – | Oct 29 | Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8529 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8528 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8527 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password." Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8526 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information by reading a Java stack trace Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8525 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8524 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8523 | – | Oct 29 | Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to hijack the authentication of unspecified… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8522 | – | Oct 29 | The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8521 | – | Oct 29 | Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8520 | – | Oct 29 | McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports Affected: through 9.2.2; 8.6; 9.2.0; 9.2.1 |
| CVE-2014-8519 | – | Oct 29 | Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files via unknown vectors Affected: through 9.2.1; 8.6; 9.2.0 |
| CVE-2004-0230 | – | May 5 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections… Affected: through 8.6; 9.2.0; 9.2.1; 9.2.2 |
Showing 31