Vulnerability Database

310,710

Total vulnerabilities in the database

CVE-2020-7302

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

  • Published: Aug 13, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-7302
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

CVSS v2:

  • Severity: Medium
  • Score: 5.5
  • AV:N/AC:L/Au:S/C:N/I:P/A:P

CWEs:

Software From Fixed in
mcafee / data_loss_prevention 11.3.0 11.3.28
mcafee / data_loss_prevention 11.4.0 11.4.200
mcafee / data_loss_prevention 11.5.0 11.5.3