Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2021-31848

Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the DLP ePO extension.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Data Loss Prevention (DLP) ePO extension

  • unspecified to < 11.7.100affected
  • unspecified to < 11.6.400affected

References