CVE-2021-31830CWE-79

Cross site Scripting (XSS) vulnerability in McAfee DBSec

Medium · published June 3, 2021

CVSS v3.1
5.9
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00501 · 42.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-06-03T10:10Z
EPSS history
Timeline
  • 03 JUN 10:10Z
    Cross site Scripting (XSS) vulnerability in McAfee DBSec
    cvelistv5