Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:data_loss_prevention_(dlp)_epo_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductData Loss Prevention (Dlp) Epo Extension (de27b5e3-c1aa-5840-b84b-3c754f11ef52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31849 vulnerable 2026-06-08 05:31:54.018909 Data Loss Prevention (DLP) ePO extension - SQL injection
HIGH (8.4)
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.
Published: 2021-11-01T19:25:13.000Z
Updated: 2024-08-03T23:10:30.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31848 vulnerable 2026-06-08 05:31:54.018460 Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS)
HIGH (8.4)
Cross site scripting (XSS) vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker to highjack an active DLP ePO administrator session by convincing the logged in administrator to click on a carefully crafted link in the case management part of the DLP ePO extension.
Published: 2021-11-01T19:25:19.000Z
Updated: 2024-08-03T23:10:30.936Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.