1 matches found
CVE-2021-31849: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...
8.4CVSS6.1AI score0.01079EPSS
SaveExploits0References3
20