| Package | Affected versions | Patched versions |
|---|---|---|
| data loss prevention endpoint | ≥ 11.9.0, < 11.9.100< 11.6.600.212 | 11.9.10011.6.600.212 |
Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Agent to access a local service that the attacker wouldn't usually have access to via a carefully constructed XML file, which the DLP Agent doesn't parse correctly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free