CVE-2017-4011: falha em McAfee Network Data Loss Prevention (NDLP)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 3.3%
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.
Produtos afetados
McAfee · Network Data Loss Prevention (NDLP)CVEs relacionadas — McAfee Network Data Loss Prevention (NDLP)
No mesmo produto, das mais perigosas para as menos.
CVE-2017-3968HIGHMcAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerabilityEPSS 1.5%CVE-2017-4012—CVE-2017-4012EPSS 1.3%CVE-2017-4015—CVE-2017-4015EPSS 1.2%CVE-2017-4017—CVE-2017-4017EPSS 1.0%CVE-2017-4016—CVE-2017-4016EPSS 1.0%CVE-2017-4013—CVE-2017-4013EPSS 1.0%