CVE-2015-2758

medium Trellix
CVSS v3 Base Score
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS Score
0.4%
Exploitation probability in 30 days
Top 40% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: March 27, 2015 (4067 days ago)
Last Modified: May 6, 2026
Vendor: Trellix
Source: NVD

Description

The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or possibly have other unspecified impact via a crafted URL.

CWE

CWE-264

Affected Products

mcafee data loss prevention endpoint

References

🔗 www.securityfocus.com 🔗 kc.mcafee.com 🔗 www.securityfocus.com 🔗 kc.mcafee.com