CVE-2020-7301

MEDIUM 4.6CVE-2020-7301 · Published 12/08/2020 · updated 17/06/2026

In short

CVE-2020-7301 is a MEDIUM (CVSS 4.6) vulnerability affecting data loss prevention (mcafee).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.5% of all vulnerabilities.
Fix: update to 11.3.28, 11.4.200, 11.5.3 or later.

Package	Affected versions	Patched versions
data loss prevention mcafee	`≥ 11.3.0, < 11.3.28≥ 11.4.0, < 11.4.200≥ 11.5.0, < 11.5.3`	`11.3.2811.4.20011.5.3`

Description

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.

References

kc.mcafee.com/corporate/index

More vulnerabilities in data loss prevention

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

data loss prevention

mcafee

≥ 11.3.0, < 11.3.28≥ 11.4.0, < 11.4.200≥ 11.5.0, < 11.5.3

11.3.2811.4.20011.5.3

More vulnerabilities in data loss prevention

See all →