Mcafee Data Loss Prevention — known CVE vulnerabilities

Every CVE whose affected-product data names Mcafee Data Loss Prevention, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2021-4088 — CVSS 8.4 (high): SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401…
• CVE-2020-7346 — CVSS 7.8 (high): Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged…
• CVE-2020-7304 — CVSS 7.6 (high): Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote…
• CVE-2020-7305 — CVSS 6.7 (medium): Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote…
• CVE-2020-7302 — CVSS 5.4 (medium): Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated…
• CVE-2021-31832 — CVSS 5.2 (medium): Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to…
• CVE-2020-7306 — CVSS 5.2 (medium): Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain…
• CVE-2020-7307 — CVSS 5.2 (medium): Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain…
• CVE-2019-3640 — CVSS 4.8 (medium): Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with…
• CVE-2020-7300 — CVSS 4.6 (medium): Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote…
• CVE-2020-7301 — CVSS 4.1 (medium): Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to…
• CVE-2020-7303 — CVSS 4.1 (medium): Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to…