{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T00:20:00.081","vulnerabilities":[{"cve":{"id":"CVE-2017-3933","sourceIdentifier":"secure@intel.com","published":"2017-10-31T14:29:00.320","lastModified":"2026-06-17T01:19:10.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack."},{"lang":"es","value":"Existe una vulnerabilidad de incrustación de script (XSS) en cabeceras HTTP en versiones 9.3.x de McAfee Network Data Loss Prevention (NDLP) que permite que usuarios autenticados remotos visualicen información confidencial mediante un ataque Cross-Site Request Forgery (CSRF)."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"McAfee","product":"Network Data Loss Prevention","versions":[{"version":"9.3.X","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6C779EE6-F793-4E35-9841-05E99D8AA922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"45C0C317-D63A-4E89-BF10-6827BB8EB09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"90206971-FBAF-43DF-8EE5-73C8EA9F481A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1C37E558-1ED5-4F9F-B07A-66D0427A303C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5CBA2394-C4D3-4970-8E38-99034B5A3F32"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101628","source":"secure@intel.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10198","source":"secure@intel.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}