Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: McAfee,LLC McAfee Database Security (DBSec) 4.8.2 Clear all filters
TI-2021-06250 CVE-2021-23896 · GHSA-89hp-893v-jcmm

Cleartext Transmission of Sensitive Information in McAfee DBSec

Priority LOW 20

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insig…

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00204 Published 2021-06-02 Fixed in 4.8.2 CWE-319
TI-2021-06249 CVE-2021-23895 · GHSA-f54c-rr24-8cqx

Authorized deserialization of untrusted data in McAfee DBSec

Priority MEDIUM 43

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via ca…

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.0187 Published 2021-06-02 Fixed in 4.8.2 CWE-502
TI-2021-06248 CVE-2021-23894 · GHSA-86cp-mgj2-w853

Unauthorized deserialization of untrusted data in McAfee DBSec

Priority MEDIUM 46

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via…

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.02242 Published 2021-06-02 Fixed in 4.8.2 CWE-502