McAfee Database Security vulnerabilities

8 CVEs affecting McAfee Database Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-31850, published 2021-12-08.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-23894, published 2021-06-02. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on…
• CVE-2021-23895, published 2021-06-02. High severity, CVSS 8.0. EPSS: 1.9% chance of exploitation in the next 30 days. Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on…
• CVE-2021-31850, published 2021-12-08. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration…
• CVE-2021-31831, published 2021-06-03. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked…
• CVE-2021-31830, published 2021-06-03. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code…
• CVE-2019-3615, published 2019-03-12. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing…
• CVE-2021-23896, published 2021-06-02. Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days. Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted…
• CVE-2020-7339, published 2020-12-10. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on…