CVE-2021-31851

CVE-2021-31851 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting McAfee Policy Auditor versions prior to 6.5.2. An unauthenticated attacker can inject malicious web script or HTML through the profileNodeID parameter, which is then reflected in the web interface. This medium-severity vulnerability (CVSS 6.1) has a low attack complexity and could lead to the theft of session tokens or login credentials, enabling access to other critical applications or arbitrary cross-domain requests. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.