← CVE Intelligence

CVE-2020-7301

DLP ePO extension - Cross site scripting PUBLISHED

Description (CNA)

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.

Affected (CNA)

Vendor / productVersions
McAfee / DLP ePO extensionaffected 11.3 before 11.3.28; affected 11.4 before 11.4.200; affected 11.5 before 11.5.3

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.