CVE-2021-31849

7.2 highEPSS 1.1%

High (7.2) in mcafee data loss prevention endpoint. EPSS 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-11-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:data_loss_prevention_endpoint

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10371
https://kc.mcafee.com/corporate/index?page=content&id=SB10371

Check your stack JSON