CVE-2017-4011: vulnerability in McAfee Network Data Loss Prevention (NDLP)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 3.3%
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.
Affected products
McAfee · Network Data Loss Prevention (NDLP)Related CVEs — McAfee Network Data Loss Prevention (NDLP)
In the same product, most dangerous first.
CVE-2017-3968HIGHMcAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerabilityEPSS 1.5%CVE-2017-4012—CVE-2017-4012EPSS 1.3%CVE-2017-4015—CVE-2017-4015EPSS 1.2%CVE-2017-4017—CVE-2017-4017EPSS 1.0%CVE-2017-4016—CVE-2017-4016EPSS 1.0%CVE-2017-4013—CVE-2017-4013EPSS 1.0%