CVE-2021-31849

SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...

CVE-2021-31848

Cross site scripting XSS vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the...

CVE-2021-31849

SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...

CVE-2021-31848

Cross site scripting XSS vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the...

CVE-2021-31848

Cross site scripting XSS vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the...

Sql injection

SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...

Cross site scripting

Cross site scripting XSS vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the...

CVE-2021-31848

CVE-2021-31848 is an XSS vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to version 11.7.100. The issue allows an attacker to hijack an active DLP ePO administrator session by convincing a logged-in admin to click a crafted link in the case-management portion of the extensi...

CVE-2021-31848 Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS)

Cross site scripting XSS vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the...

CVE-2021-31849

CVE-2021-31849 describes a SQL injection in the McAfee Data Loss Prevention (DLP) ePO extension (prior to 11.7.100). An administrator logged into ePO can inject arbitrary SQL into the ePO database via the DLP extension’s user management section. Affected product: McAfee DLP ePO extension before 1...

CVE-2021-31849 Data Loss Prevention (DLP) ePO extension - SQL injection

SQL injection vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension...

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10366)

The instance of McAfee ePolicy Orchestrator installed on the remote host is affected by the following vulnerabilities: - Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multip...

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

Privilege escalation

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

CVE-2021-23877

CVE-2021-23877 concerns the Windows trial installer of McAfee Total Protection (MTP) prior to version 16.0.34_x. The issue enables a local user to escalate privileges by replacing a specific temporary file created during installation, potentially allowing code execution with admin privileges. Aff...

CVE-2021-23877 McAfee Total Protection (MTP) - Privilege Escalation vulnerability

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

McAfee Total Protection 安全漏洞

Mcafee McAfee Total Protection MTP is a suite of antivirus software from Mcafee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection MTP that stems from a lack of security measures such as authentication, access control, and privilege management in a network syst...

CVE-2021-31834

Stored Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10 Update 11 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...