Description
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| McAfee | Network Data Loss Prevention (NDLP) | 9.3.x | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting http/cves/2017/CVE-2017-4011.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.