Mcafee Data Loss Prevention (Dlp) Epo Extension vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mcafee Data Loss Prevention (Dlp) Epo Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4CVE-2021-31848mcafeedata loss prevention (dlp) epo extension+1
EPSS score
0.81%
Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the DLP ePO extension.8.4CVE-2021-31849mcafeedata loss prevention (dlp) epo extension+1
EPSS score
1.08%
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.