CVE-2020-7304

HIGH 7.6CVE-2020-7304 · Published 13/08/2020 · updated 17/06/2026

In short

CVE-2020-7304 is a HIGH (CVSS 7.6) vulnerability affecting data loss prevention (mcafee).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.0% of all vulnerabilities.
Fix: update to 11.3.28, 11.4.200, 11.5.3 or later.

Package	Affected versions	Patched versions
data loss prevention mcafee	`≥ 11.3.0, < 11.3.28≥ 11.4.0, < 11.4.200≥ 11.5.0, < 11.5.3`	`11.3.2811.4.20011.5.3`

Description

Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.

References

kc.mcafee.com/corporate/index

More vulnerabilities in data loss prevention

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

data loss prevention

mcafee

≥ 11.3.0, < 11.3.28≥ 11.4.0, < 11.4.200≥ 11.5.0, < 11.5.3

11.3.2811.4.20011.5.3

More vulnerabilities in data loss prevention

See all →