CSRF in Mcafee Data_loss_prevention_endpoint
CVE-2015-2759
Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote attackers to hijack the authentication of users for reques…
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.
Affected products
- Mcafee Data_loss_prevention_endpoint
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)