SQL injection vulnerability in Data Loss Protection (DLP) ePO extension 11.8.x before 11.8.100, 11.7.x before 11.7.101, and 11.6.401 allows a remote authenticated malicious user to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with privilege escalation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mcafee data loss prevention |
||
mcafee data loss prevention 11.6.401 |
Vulmon