Database Security
Vendor:
First CVE: Mar 12, 2019 · Active for 7 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 27% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Database Security over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 12, 2019
7 years ago
Most Recent CVE
Dec 8, 2021
1,689 days ago
CVE Severity & Scoring
Database Security8 CVEs
75%
25%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network2 (25.0%)
Unknown0 (0.0%)
Physical1 (12.5%)
Adjacent Network5 (62.5%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (75.0%)
Unknown0 (0.0%)
Required2 (25.0%)
Privileges Required
Low2 (25.0%)
High3 (37.5%)
None3 (37.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-23894HIGH Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administr | Jun 2, 2021 | 8.8 | 27 | NO | NO |
CVE-2021-23895HIGH Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrat | Jun 2, 2021 | 8.0 | 25 | NO | NO |
CVE-2019-3615MEDIUM Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto | Mar 12, 2019 | 6.8 | 22 | NO | NO |
CVE-2021-31850MEDIUM A denial-of-service vulnerability in Database Security (DBS) prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server | Dec 8, 2021 | 6.1 | 21 | NO | NO |
CVE-2021-31831MEDIUM Incorrect access to deleted scripts vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to gain access to signed SQL scripts whi | Jun 3, 2021 | 5.5 | 19 | NO | NO |
CVE-2021-23896MEDIUM Cleartext Transmission of Sensitive Information vulnerability in the administrator interface of McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to view the | Jun 2, 2021 | 4.5 | 18 | NO | NO |
CVE-2021-31830MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows an administrator to emb | Jun 3, 2021 | 4.8 | 17 | NO | NO |
CVE-2020-7339MEDIUM Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allo | Dec 10, 2020 | 6.3 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Database Security
Top CWEs
Versions
No cataloged versions.