CVE-2017-4015

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-4015
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

4.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.5 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www.securitytracker.com/id/1038523 Broken Link Third Party Advisory VDB Entry
https://kc.mcafee.com/corporate/index?page=content&id=SB10198 Broken Link Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*
History

26 Jan 2024, 18:01

Type Values Removed Values Added
CWE CWE-20 CWE-1021
References () http://www.securitytracker.com/id/1038523 - () http://www.securitytracker.com/id/1038523 - Broken Link, Third Party Advisory, VDB Entry
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10198 - Vendor Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10198 - Broken Link, Vendor Advisory
Information

Published : 2017-05-17 21:29

Updated : 2024-01-26 18:01

NVD link : CVE-2017-4015

Mitre link : CVE-2017-4015

CVE.ORG link : CVE-2017-4015

JSON object : View

Products Affected

mcafee

  • network_data_loss_prevention
CWE
CWE-1021

Improper Restriction of Rendered UI Layers or Frames