ND
Product
Network Data Loss Prevention
31
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 8Low 0
Watch
Add Network Data Loss Prevention to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-4012 | 6.5 | May 17 | Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via… Affected: through 9.3.0 |
| CVE-2017-4011 | 6.1 | May 17 | Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information… Affected: through 9.3.0 |
| CVE-2017-3934 | 5.9 | Oct 31 | Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to… Affected: through 9.3.0 |
| CVE-2017-3933 | 5.4 | Oct 31 | Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a… Affected: 9.3.0; 9.3.1; 9.3.2; 9.3.3; 9.3.4 |
| CVE-2017-4017 | 5.3 | May 17 | User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface Affected: through 9.3.0 |
| CVE-2017-4016 | 5.3 | May 17 | Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header Affected: through 9.3.0 |
| CVE-2017-4013 | 5.3 | May 17 | Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header Affected: through 9.3.0 |
| CVE-2017-4015 | 4.5 | May 17 | Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP… Affected: through 9.3.0 |
Showing 8