Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: McAfee Data Loss Prevention (DLP) ePO extension 11.6.400, 11.7.100 Clear all filters
TI-2021-11841 CVE-2021-31848 · GHSA-h28h-cmg9-rmpc

Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS)

Priority LOW 38

Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in admin…

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00812 Published 2021-11-01 Fixed in 11.7.100, 11.6.400 CWE-79
TI-2021-11842 CVE-2021-31849 · GHSA-p5vq-v446-g576

Data Loss Prevention (DLP) ePO extension - SQL injection

Priority LOW 39

SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user…

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01079 Published 2021-11-01 Fixed in 11.7.100, 11.6.400 CWE-89