CVE-2019-3661

8.8 highEPSS 1.1%

High (8.8) in mcafee advanced threat defense. EPSS 1.1% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2019-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:advanced_threat_defense

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10304
https://kc.mcafee.com/corporate/index?page=content&id=SB10304

Check your stack JSON