CVE-2021-23896

4.5 mediumEPSS 0.2%

Medium (4.5) in mcafee database security. EPSS 0.2% chance of exploitation in the next 30 days.

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.

Severity

CVSS 3.1

4.5 medium

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2021-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:database_security

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10359
https://kc.mcafee.com/corporate/index?page=content&id=SB10359

Check your stack JSON