CVE-2020-7305: McAfee Data Loss Prevention

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.

Affected products

• McAfee Data Loss Prevention: from 11.3.0, before 11.3.28 (fixed in 11.3.28); from 11.4.0, before 11.4.200 (fixed in 11.4.200); from 11.5.0, before 11.5.3 (fixed in 11.5.3)

Published 2020-08-13. Last modified 2026-06-17.