← CVE Intelligence

CVE-2021-31848

Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS) PUBLISHED

Description (CNA)

Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the DLP ePO extension.

Affected (CNA)

Vendor / productVersions
McAfee / Data Loss Prevention (DLP) ePO extensionaffected unspecified before 11.7.100; affected unspecified before 11.6.400

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.