VulnerabilityModified
CVE-2020-7303
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.
MEDIUM 4.1EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.
- CVSS 3.1
- 4.1 MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- mcafee/data loss prevention
- Source
- trellixpsirt@trellix.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.