SQL Injection in Mcafee Data Loss Prevention Endpoint

CVE-2015-1616

SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL commands via unspecified vectors.

Vulnerability class: SQL Injection

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

Affected products

Mcafee Data_loss_prevention_endpoint
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)