Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee,llc:mcafee_data_loss_prevention_(dlp)_epo_extension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMcafee,Llc (a07eec98-d34c-5045-9a0e-859fd3b6002d)
ProductMcafee Data Loss Prevention (Dlp) Epo Extension (f9cd7302-3f5f-5699-9adb-1c429e90f8fc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4088 vulnerable 2026-06-03 14:45:47.719363 Blind SQL injection in DLP ePO extension
HIGH (8.4)
SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with privilege escalation.
Published: 2022-01-24T16:00:14.000Z
Updated: 2024-08-03T17:16:03.698Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.