CVE-2020-7339

CVE-2020-7339 affects McAfee Database Security Server and Sensor prior to version 4.8.0. The vulnerability stems from the use of SHA-1 signed certificates, enabling an attacker on the same local network to potentially intercept communication between the Server and Sensors. Publicly available conn...

CVE-2021-31850

CVE-2021-31850 describes a denial-of-service in McAfee Database Security (DBS) before 4.8.4. The issue arises from archiving functionality via the user interface, where an authenticated remote administrator can trigger DoS by abusing file operations and path handling. The root cause is improper v...

CVE-2021-31831

CVE-2021-31831 concerns McAfee Database Security (DBSec) prior to 4.8.2. Affected component: REST API access to signed SQL scripts marked as deleted/expired in the administrative console. Root cause: incorrect access control allowing a remote authenticated attacker to gain access to these scripts...

CVE-2019-3615

CVE-2019-3615 affects the web interface of McAfee Database Security prior to version 4.6.6 (March 2019). The issue allows local users to exfiltrate passwords by exploiting incorrectly autofilled password fields on the admin login screen. Impact is described in NT terms as exposure of passwords an...