VULNERABILITY INTELLIGENCE
CVE-2020-7252
CVSS score4.2 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2020-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Description
Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.
Weakness classification
- CWE-250: Execution with Unnecessary Privileges
- CWE-428: Unquoted Search Path or Element