CVE-2021-31830: Cross site Scripting (XSS) vulnerability in McAfee DBSec
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to embed JavaScript code when configuring the name of a database to be monitored. This would be triggered when any authorized user logs into the DBSec interface and opens the properties configuration page for this database.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of the Cross-site Scripting vulnerability in McAfee Database Security?
The vulnerability ID is CVE-2021-31830.
What is the severity of CVE-2021-31830?
The severity of CVE-2021-31830 is medium with a severity value of 4.8.
What software is affected by CVE-2021-31830?
McAfee Database Security (DBSec) prior to 4.8.2 is affected by CVE-2021-31830.
How does CVE-2021-31830 occur?
CVE-2021-31830 occurs due to improper neutralization of input during web page generation, allowing for cross-site scripting (XSS) attacks.
Is there a fix available for CVE-2021-31830?
Yes, a fix is available for CVE-2021-31830. It is recommended to update to McAfee Database Security (DBSec) version 4.8.2 or later.