CVE-2017-4015
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.
- Score
- CVSS 3.1 4.5 Medium
- Status
- Modified - secure@intel.com
- Published
- 2017-05-17
- Last modified
- 2024-08-05
- Weaknesses
- CWE-1021
Affected products
References
- http://www.securitytracker.com/id/1038523
- https://kc.mcafee.com/corporate/index?page=content&id=SB10198
