CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.4. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2021-31849
Severity
HIGH
CVSS
8.4
EPSS
1.04%
Original NVD Description
SQL injection vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.7.100 allows a remote attacker logged into ePO as an administrator to inject arbitrary SQL into the ePO database through the user management section of the DLP ePO extension.
Related CVEs
Other vulnerabilities affecting the same vendor(s)