CVE-2017-3968

< 9.3.4.1.5

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network

7.5HIGH

CVE-2017-3935

<= 9.3.0

Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-

7.5HIGH

CVE-2017-3934

<= 9.3.0

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP)

5.9MEDIUM

CVE-2017-3933

all versions

Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticat

5.4MEDIUM

CVE-2017-4017

<= 9.3.0

User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user inform

5.3MEDIUM

CVE-2017-4016

<= 9.3.0

Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit

5.3MEDIUM

CVE-2017-4015

<= 9.3.0

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to

4.5MEDIUM

CVE-2017-4014

<= 9.3.0

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated u

8.0HIGH

CVE-2017-4013

<= 9.3.0

Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product info

5.3MEDIUM

CVE-2017-4012

<= 9.3.0

Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated u

6.5MEDIUM

CVE-2017-4011

<= 9.3.0

Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remo

6.1MEDIUM

CVE-2014-8537

<= 9.2.1

McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading the logs.

CVE-2014-8536

<= 9.2.1

McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading unspecified

CVE-2014-8535

<= 9.2.1

McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecified functiona

CVE-2014-8534

<= 9.2.1

Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to cause

CVE-2014-8533

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICM

CVE-2014-8532

<= 9.2.2

Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows local users to obtain sensitive i

CVE-2014-8531

<= 9.2.2

The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for

CVE-2014-8530

<= 9.2.2

Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive inf

CVE-2014-8529

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitiv

CVE-2014-8528

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information b

CVE-2014-8527

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect integrity via

CVE-2014-8526

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information by reading a Java stack t

CVE-2014-8525

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session co

CVE-2014-8524

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields,

CVE-2014-8523

<= 9.2.2

Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers t

CVE-2014-8522

<= 9.2.2

The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for

CVE-2014-8521

<= 9.2.2

Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated user

CVE-2014-8520

<= 9.2.2

McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related

CVE-2014-8519

<= 9.2.1

Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files vi

CVE-2004-0230

<= 8.6

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service