CVE-2017-4015: vulnerability in McAfee Network Data Loss Prevention (NDLP)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.
Affected products
McAfee · Network Data Loss Prevention (NDLP)Related CVEs — McAfee Network Data Loss Prevention (NDLP)
In the same product, most dangerous first.
CVE-2017-4011—CVE-2017-4011EPSS 3.3%CVE-2017-3968HIGHMcAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerabilityEPSS 1.5%CVE-2017-4012—CVE-2017-4012EPSS 1.3%CVE-2017-4017—CVE-2017-4017EPSS 1.0%CVE-2017-4016—CVE-2017-4016EPSS 1.0%CVE-2017-4013—CVE-2017-4013EPSS 1.0%