CVE-2017-4011
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.
- Score
- CVSS 3.0 6.1 Medium
- Status
- Modified - secure@intel.com
- Published
- 2017-05-17
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
References
- http://www.securitytracker.com/id/1038523
- https://kc.mcafee.com/corporate/index?page=content&id=SB10198
