CVE-2017-4014: McAfee Network Data Loss Prevention

High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request.

Affected products

• McAfee Network Data Loss Prevention: up to and including 9.3.0

Published 2017-05-17. Last modified 2026-06-17.