Network Data Loss Prevention vulnerabilitiesRanked by how likely they are to be used.
Network Data Loss Prevention is made by Mcafee. We track 31 published vulnerabilities in it, across 10 versions. None of them is on the list of flaws known to be exploited today. If you run Network Data Loss Prevention, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Network Data Loss Prevention vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Network Data Loss Prevention's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Network Data Loss Prevention flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 80%CVE-2004-0230Medium
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST...
- 3.3%CVE-2017-4011Medium
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.
- 2.2%CVE-2014-8533High
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection.
- 1.9%CVE-2014-8531Medium
The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors.
- 1.5%CVE-2017-3968Critical
Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose...
- 1.4%CVE-2014-8520Medium
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports.
- 1.4%CVE-2014-8525Medium
McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive...
- 1.3%CVE-2014-8530High
Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related...
- 1.3%CVE-2017-4012Medium
Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via modification of the HTTP request.
- 1.3%CVE-2014-8522High
The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access.
Running Network Data Loss Prevention? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
- Matched to
- Network Data Loss Prevention on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 31 published vulnerabilities listed under the name Network Data Loss Prevention, across 10 versions.
None of Network Data Loss Prevention's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Network Data Loss Prevention. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.