CVE-2021-31830

4.8 mediumEPSS 0.5%

Medium (4.8) in mcafee database security. EPSS 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-06-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:database_security

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10359
https://kc.mcafee.com/corporate/index?page=content&id=SB10359

Check your stack JSON