Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2021-31849

Data Loss Prevention (DLP) ePO extension - SQL injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Data Loss Prevention (DLP) ePO extension

  • unspecified to < 11.7.100affected
  • unspecified to < 11.6.400affected

References