high8.4
CVE-2021-31849
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator t…
Impact
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Data Loss Prevention Endpoint | from 11.6.0 before 11.6.400 from 11.7.0 before 11.7.100 |