CVE-2020-7252

—

CVSS 3.1

5.5 medium

EPSS

<1%p41

Published

Feb 17, 2020 (Feb 17, 2020)

Modified

Jun 17, 2026

Description

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

Vendors: mcafee
Products: data exchange layer
Weakness: CWE-250, CWE-428
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.