Medium severity4.5NVD Advisory· Published May 17, 2017· Updated Jun 17, 2026
CVE-2017-4015
CVE-2017-4015
Description
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.
Affected products
2cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*range: <=9.3.0
- (no CPE)range: 9.3.x
Patches
Vulnerability mechanics
References
2- www.securitytracker.com/id/1038523nvdBroken LinkThird Party AdvisoryVDB Entry
- kc.mcafee.com/corporate/indexnvdBroken LinkVendor Advisory
News mentions
0No linked articles in our index yet.