← CVE Intelligence

CVE-2020-7303

DLP ePO extension - Cross-site scripting PUBLISHED

Description (CNA)

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.

Affected (CNA)

Vendor / productVersions
McAfee / DLP ePO extensionaffected 11.3 before 11.3.28; affected 11.4 before 11.4.200; affected 11.5 before 11.5.3

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.