VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 17, 2015· Updated Jun 17, 2026

CVE-2015-1617

CVE-2015-1617

Description

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

2
  • McAfee/Data Loss Prevention Endpoint2 versions
    cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*range: <=9.3.300
    • (no CPE)range: <9.3.400

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.