CVE-2017-4015

EUVD-2017-13132
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
mcafeenetwork_data_loss_prevention
𝑥
≤ 9.3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id/1038523
https://kc.mcafee.com/corporate/index?page=content&id=SB10198
http://www.securitytracker.com/id/1038523
https://kc.mcafee.com/corporate/index?page=content&id=SB10198