Mcafee Network Data Loss Prevention vulnerabilities
31 vulnerabilities
Known vulnerabilities in Mcafee Network Data Loss Prevention, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2014-8531mcafeenetwork_data_loss_prevention
EPSS score1.92%
The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors.CVE-2014-8534mcafeenetwork_data_loss_preventionEPSS score0.29%
Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to cause a denial of service via a crafted value in the domain field.CVE-2014-8523mcafeenetwork_data_loss_preventionEPSS score0.58%
Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.CVE-2014-8530mcafeenetwork_data_loss_preventionEPSS score1.32%
Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins.CVE-2014-8535mcafeenetwork_data_loss_preventionEPSS score0.32%
McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors.CVE-2014-8537mcafeenetwork_data_loss_preventionEPSS score0.33%
McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading the logs.CVE-2014-8536mcafeenetwork_data_loss_preventionEPSS score0.33%
McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages.CVE-2014-8529mcafeenetwork_data_loss_preventionEPSS score0.32%
McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors.CVE-2014-8533mcafeenetwork_data_loss_preventionEPSS score2.17%
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection.CVE-2014-8525mcafeenetwork_data_loss_preventionEPSS score1.35%
McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.CVE-2014-8524mcafeenetwork_data_loss_preventionEPSS score1.19%
McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors.CVE-2014-8521mcafeenetwork_data_loss_preventionEPSS score0.39%
Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVE-2014-8520mcafeenetwork_data_loss_preventionEPSS score1.35%
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports.CVE-2014-8526mcafeenetwork_data_loss_preventionEPSS score0.37%
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information by reading a Java stack trace.CVE-2014-8528mcafeenetwork_data_loss_preventionEPSS score0.32%
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.CVE-2014-8532mcafeenetwork_data_loss_preventionEPSS score0.32%
Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting.CVE-2014-8522mcafeenetwork_data_loss_preventionEPSS score1.25%
The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access.CVE-2014-8519mcafeenetwork_data_loss_preventionEPSS score0.32%
Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files via unknown vectors.CVE-2014-8527mcafeenetwork_data_loss_preventionEPSS score0.32%
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."CVE-2017-4015mcafeenetwork_data_loss_prevention+1EPSS score1.20%
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.