CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7304

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.2%

CVSS Severity

CVSS v3 Score 7.6

CVSS v2 Score 5.2

References

Products affected by CVE-2020-7304

Mcafee » Data Loss Prevention » Version: 11.3.0

cpe:2.3:a:mcafee:data_loss_prevention:11.3.0
Mcafee » Data Loss Prevention » Version: 11.3.0.172

cpe:2.3:a:mcafee:data_loss_prevention:11.3.0.172
Mcafee » Data Loss Prevention » Version: 11.3.1

cpe:2.3:a:mcafee:data_loss_prevention:11.3.1
Mcafee » Data Loss Prevention » Version: 11.3.13.1

cpe:2.3:a:mcafee:data_loss_prevention:11.3.13.1
Mcafee » Data Loss Prevention » Version: 11.3.2

cpe:2.3:a:mcafee:data_loss_prevention:11.3.2
Mcafee » Data Loss Prevention » Version: 11.3.3

cpe:2.3:a:mcafee:data_loss_prevention:11.3.3
Mcafee » Data Loss Prevention » Version: 11.3.4

cpe:2.3:a:mcafee:data_loss_prevention:11.3.4
Mcafee » Data Loss Prevention » Version: 11.4.0

cpe:2.3:a:mcafee:data_loss_prevention:11.4.0
Mcafee » Data Loss Prevention » Version: 11.4.0.17

cpe:2.3:a:mcafee:data_loss_prevention:11.4.0.17
Mcafee » Data Loss Prevention » Version: 11.4.100

cpe:2.3:a:mcafee:data_loss_prevention:11.4.100
Mcafee » Data Loss Prevention » Version: 11.5.0

cpe:2.3:a:mcafee:data_loss_prevention:11.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7304

Products

Pricing

Contact Us