CVE-2021-31830 MEDIUM

CVE-2021-31830: Cross site Scripting (XSS) vulnerability in McAfee DBSec

Vendor Mcafee,Llc
Product McAfee Database Security (DBSec)
Weakness CWE-79 · XSS
Published June 3, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.

Key dates

02Disclosure timeline

June 3, 2021 CVE published
August 3, 2024 Record updated