Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductData Loss Prevention (fdb00030-fd52-5fcc-970d-345595bd2bdd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7307 vulnerable 2026-06-08 05:27:12.825206 DLP for Mac - Unprotected Storage of Credentials
MEDIUM (5.2)
Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.
Published: 2020-08-13T03:20:13.000Z
Updated: 2024-08-04T09:25:49.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7306 vulnerable 2026-06-08 05:27:12.824751 DLP for Mac - Unprotected Storage of Credentials
MEDIUM (5.2)
Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text
Published: 2020-08-13T03:10:17.000Z
Updated: 2024-08-04T09:25:48.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7305 vulnerable 2026-06-08 05:27:12.822403 DLP ePO extension - Privilege escalation
MEDIUM (6.7)
Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.
Published: 2020-08-13T03:05:15.000Z
Updated: 2024-08-04T09:25:48.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7304 vulnerable 2026-06-08 05:27:12.821970 DLP ePO extension - Cross-site request forgery
HIGH (7.6)
Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.
Published: 2020-08-13T03:00:19.000Z
Updated: 2024-08-04T09:25:49.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7303 vulnerable 2026-06-08 05:27:12.821624 DLP ePO extension - Cross-site scripting
MEDIUM (4.1)
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.
Published: 2020-08-13T02:55:13.000Z
Updated: 2024-08-04T09:25:49.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7302 vulnerable 2026-06-08 05:27:12.821094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7301 vulnerable 2026-06-08 05:27:12.820706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7300 vulnerable 2026-06-08 05:27:12.820146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3640 vulnerable 2026-06-08 05:13:55.189455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.