Mcafee: >> Network Data Loss Prevention Security Vulnerabilities
User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface.
CVSS Score
5.3
EPSS Score
0.002
Published
2017-05-17
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection.
CVSS Score
7.5
EPSS Score
0.03
Published
2014-10-29
Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field.
CVSS Score
2.1
EPSS Score
0.001
Published
2014-10-29
McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors.
CVSS Score
4.6
EPSS Score
0.001
Published
2014-10-29
McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages.
CVSS Score
2.1
EPSS Score
0.001
Published
2014-10-29
McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading the logs.
CVSS Score
2.1
EPSS Score
0.001
Published
2014-10-29
Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files via unknown vectors.
CVSS Score
2.1
EPSS Score
0.001
Published
2014-10-29
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports.
CVSS Score
5.0
EPSS Score
0.005
Published
2014-10-29
Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score
3.5
EPSS Score
0.001
Published
2014-10-29
The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access.
CVSS Score
7.5
EPSS Score
0.006
Published
2014-10-29