Network Data Loss Prevention
Vendor:
First CVE: Aug 18, 2004 · Active for 21 years
31
Total CVEs
More Total CVEs than 97% of tracked products
7.8
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
5.0
Avg CVSS
Higher Avg CVSS than 9% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Network Data Loss Prevention over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 18, 2004
21 years ago
Most Recent CVE
Jun 13, 2018
2,967 days ago
CVE Severity & Scoring
Network Data Loss Prevention31 CVEs
32%
48%
16%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (35.5%)
Unknown20 (64.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (32.3%)
High1 (3.2%)
Unknown20 (64.5%)
User Interaction
None7 (22.6%)
Unknown20 (64.5%)
Required4 (12.9%)
Privileges Required
Low3 (9.7%)
High1 (3.2%)
None7 (22.6%)
Unknown20 (64.5%)
Top CVEs
Signals from CVEs in this product scope (31 CVEs).
31 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0230MEDIUM TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by | Aug 18, 2004 | 5.0 | 74 | NO | YES |
CVE-2017-4011MEDIUM Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via | May 17, 2017 | 6.1 | 31 | NO | YES |
CVE-2017-4014HIGH Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modificati | May 17, 2017 | 8.0 | 25 | NO | NO |
CVE-2017-3968CRITICAL Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allow | Jun 13, 2018 | 9.1 | 24 | NO | NO |
CVE-2017-3935HIGH Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing | Oct 31, 2017 | 7.5 | 21 | NO | NO |
CVE-2017-4012MEDIUM Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via modifica | May 17, 2017 | 6.5 | 21 | NO | NO |
CVE-2014-8522HIGH The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access. | Oct 29, 2014 | 7.5 | 21 | NO | NO |
CVE-2017-4016MEDIUM Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header. | May 17, 2017 | 5.3 | 20 | NO | NO |
CVE-2017-4013MEDIUM Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header. | May 17, 2017 | 5.3 | 20 | NO | NO |
CVE-2014-8533HIGH McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection. | Oct 29, 2014 | 7.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (31 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
3.2% of CVEs· 97th percentile
ExploitDB
1 CVE
3.2% of CVEs· 85th percentile
Social Chatter
Signals from CVEs in this product scope (31 CVEs).
Media Mentions
Signals from CVEs in this product scope (31 CVEs).
Top CNAs Publishing CVEs For Network Data Loss Prevention
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.3.4 | 1 | 5.4 | 0.6% | 0 | 0 |
| 9.3.3 | 1 | 5.4 | 0.6% | 0 | 0 |
| 9.3.2 | 1 | 5.4 | 0.6% | 0 | 0 |
| 9.3.1 | 1 | 5.4 | 0.6% | 0 | 0 |
| 9.3.0 | 1 | 5.4 | 0.6% | 0 | 0 |
| 9.2.2 | 1 | 5.0 | 80.3% | 0 | 1 |
| 9.2.1 | 15 | 4.8 | 6.2% | 0 | 1 |
| 9.2.0 | 20 | 4.3 | 4.8% | 0 | 1 |
| 8.6 | 19 | 4.3 | 0.8% | 0 | 0 |