VULNERABILITY INTELLIGENCE

CVE-2017-4015

CVSS score4.5 MEDIUM
EPSS probability1.20%
CISA KEVNot currently listed
Published2017-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Description

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

Weakness classification

  • CWE-1021: Improper Restriction of Rendered UI Layers or Frames

Primary references