Mcafee Network Data Loss Prevention vulnerabilities, page 2
31 vulnerabilities
Known vulnerabilities in Mcafee Network Data Loss Prevention, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-4016mcafeenetwork_data_loss_prevention+1
EPSS score1.05%
Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.CVE-2017-4014mcafeenetwork_data_loss_prevention+1EPSS score0.86%
Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request.CVE-2017-4012mcafeenetwork_data_loss_prevention+1EPSS score1.26%
Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via modification of the HTTP request.CVE-2017-4011mcafeenetwork_data_loss_prevention+1EPSS score3.27%
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.CVE-2017-4017mcafeenetwork_data_loss_prevention+1EPSS score1.05%
User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface.CVE-2017-4013mcafeenetwork_data_loss_prevention+1EPSS score1.05%
Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header.CVE-2017-3935mcafeenetwork_data_loss_preventionEPSS score1.03%
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type.CVE-2017-3968mcafeenetwork_data_loss_prevention+3EPSS score1.50%
Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.CVE-2017-3934mcafeenetwork_data_loss_preventionEPSS score0.99%
Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.CVE-2017-3933mcafeenetwork_data_loss_preventionEPSS score0.64%
Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack.CVE-2004-0230debianlinux+12EPSS score80.29%
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.