CVE-2015-1617: McAfee Data Loss Prevention Endpoint

Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• McAfee Data Loss Prevention Endpoint: up to and including 9.3.300

Published 2015-02-17. Last modified 2026-06-17.