CVE-2015-1617

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-17 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows: through 9.3.300

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10098
https://kc.mcafee.com/corporate/index?page=content&id=SB10098

Get alerted when CVE-2015-1617 or the next vulnerability affects your stack