CVE-2014-8521

Published: Oct 29, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected (4)

Products: Mcafee: Network Data Loss Prevention

Mcafee

1 product

Network Data Loss Prevention

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Data Loss Prevention	Up to 9.2.2
Mcafee Network Data Loss Prevention	Version 8.6
Mcafee Network Data Loss Prevention	Version 9.2.0
Mcafee Network Data Loss Prevention	Version 9.2.1

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.