Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductData Loss Prevention (fdb00030-fd52-5fcc-970d-345595bd2bdd)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31832 vulnerable 2026-06-08 05:31:53.985712 Cross site scripting vulnerability in DLP Endpoint for Windows
MEDIUM (5.2)
Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a remote ePO DLP administrator to inject JavaScript code into the alert configuration text field. This JavaScript will be executed when an end user triggers a DLP policy on their machine.
Published: 2021-06-09T13:45:17.000Z
Updated: 2024-08-03T23:10:30.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7346 vulnerable 2026-06-08 05:27:12.894430 Privilege escalation in McAfee DLP Endpoint for Windows
HIGH (7.8)
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attacker along with sending a specific IOTL command at the correct time.
Published: 2021-03-23T16:05:23.000Z
Updated: 2024-08-04T09:25:49.105Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.