Vulnerability Details CVE-2020-7301
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.2%
CVSS Severity
CVSS v3 Score 4.1
CVSS v2 Score 3.5
Products affected by CVE-2020-7301
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.0
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.0.172
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.1
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.13.1
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.2
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.3
-
cpe:2.3:a:mcafee:data_loss_prevention:11.3.4
-
cpe:2.3:a:mcafee:data_loss_prevention:11.4.0
-
cpe:2.3:a:mcafee:data_loss_prevention:11.4.0.17
-
cpe:2.3:a:mcafee:data_loss_prevention:11.4.100
-
cpe:2.3:a:mcafee:data_loss_prevention:11.5.0