| Package | Affected versions | Patched versions |
|---|---|---|
| data loss prevention endpoint | ≥ 11.6.0, < 11.6.400≥ 11.7.0, < 11.7.100 | 11.6.40011.7.100 |
Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the DLP ePO extension.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free