{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T21:59:56.418","vulnerabilities":[{"cve":{"id":"CVE-2017-4014","sourceIdentifier":"secure@intel.com","published":"2017-05-17T21:29:00.320","lastModified":"2026-06-17T01:19:13.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request."},{"lang":"es","value":"Una vulnerabilidad de tipo Session Side jacking en el servidor en McAfee Network Data Loss Prevention (NDLP) versiones 9.3.x, permite a los usuarios autenticados remotos visualizar, agregar y eliminar usuarios mediante la modificación de la petición HTTP."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"McAfee","product":"Network Data Loss Prevention (NDLP)","versions":[{"version":"9.3.x","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6.0,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"DABB617F-203F-4074-82D2-B975C15221F3"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1038523","source":"secure@intel.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10198","source":"secure@intel.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1038523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}