Server-side Clickjacking Vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x

CVE-2017-4015 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

Learn more about our Web App Pen Testing.