Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-7302

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

  • Published: Aug 13, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-7302
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

CVSS v2:

  • Severity: Medium
  • Score: 5.5
  • AV:N/AC:L/Au:S/C:N/I:P/A:P

CWEs:

Software From Fixed in
mcafee / data_loss_prevention 11.3.0 11.3.28
mcafee / data_loss_prevention 11.4.0 11.4.200
mcafee / data_loss_prevention 11.5.0 11.5.3