CVE-2017-4015

4.5
MEDIUMCVSS v3.1 Base Score
1.20%
LOW RiskEPSS (67th percentile)

Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.

Published: 5/17/2017
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

4.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

CVSS v2 Score

3.5

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS Score (Exploitation Probability)

1.20%LOW Exploitation Risk
67th percentile

This vulnerability has a 1.20% probability of being exploited in the next 30 days, ranking higher than 67% of all scored CVEs.

CWE Classification

Advertisement