Approved changes feed: RSS · Atom

cpe:2.3:a:mcafee:data_loss_prevention:11.6.401:*:*:*:*:epolicy_orchestrator:*:*

part: a version: 11.6.401 update: *

VendorMcafee (b3716737-1d68-5e90-9de7-ce927cce9af4)
ProductData Loss Prevention (fdb00030-fd52-5fcc-970d-345595bd2bdd)
Edition*
Language*
Software edition*
Target softwareepolicy_orchestrator
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4088 vulnerable 2026-06-08 05:38:08.314660 Blind SQL injection in DLP ePO extension
HIGH (8.4)
SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with privilege escalation.
Published: 2022-01-24T16:00:14.000Z
Updated: 2024-08-03T17:16:03.698Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.