Description
Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| McAfee | DLP ePO extension | 11.3 – < 11.3.28, 11.4 – < 11.4.200, 11.5 – < 11.5.3 | 11.3.28 |