Dlp Epo Extension
Approved changes feed: RSS · Atom
cpe:2.3:a:mcafee:dlp_epo_extension:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mcafee (b3716737-1d68-5e90-9de7-ce927cce9af4) |
|---|---|
| Product | Dlp Epo Extension (f2badaef-dae7-5960-a8a4-629793f4df2c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7305 |
vulnerable | 2026-06-08 05:27:12.822369 |
DLP ePO extension - Privilege escalation
MEDIUM (6.7)
Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.
Published: 2020-08-13T03:05:15.000Z
Updated: 2024-08-04T09:25:48.994Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7304 |
vulnerable | 2026-06-08 05:27:12.821941 |
DLP ePO extension - Cross-site request forgery
HIGH (7.6)
Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.
Published: 2020-08-13T03:00:19.000Z
Updated: 2024-08-04T09:25:49.056Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7303 |
vulnerable | 2026-06-08 05:27:12.821518 |
DLP ePO extension - Cross-site scripting
MEDIUM (4.1)
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.
Published: 2020-08-13T02:55:13.000Z
Updated: 2024-08-04T09:25:49.063Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7302 |
vulnerable | 2026-06-08 05:27:12.821061 |
DLP ePO extension - Unrestricted Upload of File with Dangerous Type
MEDIUM (5.4)
Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.
Published: 2020-08-13T02:50:13.000Z
Updated: 2024-08-04T09:25:49.041Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7301 |
vulnerable | 2026-06-08 05:27:12.820576 |
DLP ePO extension - Cross site scripting
MEDIUM (4.1)
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.
Published: 2020-08-12T22:10:13.000Z
Updated: 2024-08-04T09:25:49.031Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7300 |
vulnerable | 2026-06-08 05:27:12.819201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.