Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2021-31850

Denial of Service in Database Security on Windows

A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files in Windows system directories and other locations where sensitive data could be overwritten. The former could lead to a DoS, whilst the latter could lead to data destruction on the DBS server.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee Microsoft
Products
Database Security Windows
CVE-2021-31831

Incorrect access to deleted scripts vulnerability in McAfee DBSec

Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts which have been marked as deleted or expired within the administrative console. This access was only available through the REST API.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Database Security
CVE-2021-31830

Cross site Scripting (XSS) vulnerability in McAfee DBSec

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Database Security
CVE-2021-23896

Cleartext Transmission of Sensitive Information in McAfee DBSec

Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the unencrypted password of the McAfee Insights Server used to pass data to the Insights Server. This user is restricted to only have access to DBSec data in the Insights Server.

CVSS 3.1 · 3.2 Low EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Database Security
CVE-2021-23895

Authorized deserialization of untrusted data in McAfee DBSec

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.

CVSS 3.1 · 9 Critical EPSS 1.9% KEV · Not listed
Vendors
Mcafee
Products
Database Security
CVE-2021-23894

Unauthorized deserialization of untrusted data in McAfee DBSec

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent to the DBSec server.

CVSS 3.1 · 9.6 Critical EPSS 2.2% KEV · Not listed
Vendors
Mcafee
Products
Database Security
CVE-2020-7339

Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Database Security
CVE-2019-3615

Data Leakage Vulnerability in McAfee Database Security web interface

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Database Security