CVE-2017-3948

Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.100:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.200:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.230:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:data_loss_prevention_endpoint:10.0.250:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-06-23 13:29

Updated : 2024-02-04 19:29


NVD link : CVE-2017-3948

Mitre link : CVE-2017-3948

CVE.ORG link : CVE-2017-3948


JSON object : View

Products Affected

mcafee

  • data_loss_prevention_endpoint
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')