CVE-2020-7303

MEDIUM 4.1CVE-2020-7303 · Published 13/08/2020 · updated 17/06/2026

In short

CVE-2020-7303 is a MEDIUM (CVSS 4.1) vulnerability affecting data loss prevention (mcafee).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 37.9% of all vulnerabilities.
Fix: update to 11.3.28, 11.4.200, 11.5.3 or later.

Package	Affected versions	Patched versions
data loss prevention mcafee	`≥ 11.3.0, < 11.3.28≥ 11.4.0, < 11.4.200≥ 11.5.0, < 11.5.3`	`11.3.2811.4.20011.5.3`

Description

Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.

References

kc.mcafee.com/corporate/index

More vulnerabilities in data loss prevention

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

data loss prevention

mcafee

≥ 11.3.0, < 11.3.28≥ 11.4.0, < 11.4.200≥ 11.5.0, < 11.5.3

11.3.2811.4.20011.5.3

More vulnerabilities in data loss prevention

See all →