description: Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack.
problem types: Embedding Script (XSS) in HTTP Headers vulnerability
affected:
{
product: Network Data Loss Prevention
vendor: McAfee
versions:
status: affected, version: 9.3.X
}