CVE-2021-31830: McAfee,LLC McAfee Database Security (DBSec), XSS

Описание

Оригинално описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.

Засегнати продукти

• McAfee,LLC McAfee Database Security (DBSec): unspecified преди 4.8.2

Вид слабост

• CWE-79 XSS

История

Други уязвимости в McAfee,LLC McAfee Database Security (DBSec)

• 6.1CVE-2021-31850
• 4.9CVE-2021-31831
• 3.2CVE-2021-23896
• 9.0CVE-2021-23895
• 9.6CVE-2021-23894

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-31830
• https://nvd.nist.gov/vuln/detail/CVE-2021-31830
• https://kc.mcafee.com/corporate/index?page=content&id=SB10359