Endpoint Security Web Control
1 CVEs
product
Monthly
A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to switch the content. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XSS
Endpoint Security Web Control
NVD
CVSS 3.1
6.1
EPSS
0.2%
EPSS 0%
CVSS 6.1
MEDIUM
This Month
A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to switch the content. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
XSS
Endpoint Security Web Control
NVD