Dlp Endpoint Epo Extension

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee,_llc:dlp_endpoint_epo_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee, Llc (29c15f68-63cd-5177-80ed-677606d05f07)
ProductDlp Endpoint Epo Extension (7d48204d-acd5-5704-8cd7-c59b1152cbfd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3595 vulnerable 2026-06-03 14:40:26.648012 DLP Endpoint ePO extension not sanitizing CSV exports
LOW (2)
Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is exported and opened on the their machine. In our checks, the user must explicitly allow the code to execute.
Published: 2019-07-24T14:28:59.000Z
Updated: 2024-08-04T19:12:09.605Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.