Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2019-3661

Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Advanced Threat Defense (ATD)

  • unspecified to < 4.8affected

References