CVEvulnerability

CVE-2017-4015

4.5 MEDIUM Published 2017-05-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-1021

Description

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

Affected configurations

• mcafee network data loss prevention (<= 9.3.0)

Related

Weakness · CWE (1)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness

Referenced by CWE · observed example (1)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness

References