CVE-2021-31832: Cross site scripting vulnerability in DLP Endpoint for Windows

Severity: medium (CVSS 4.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-09 · updated 2026-06-17
Weakness: CWE-79

Description

Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a remote ePO DLP administrator to inject JavaScript code into the alert configuration text field. This JavaScript will be executed when an end user triggers a DLP policy on their machine.

Affected products

McAfee Data Loss Prevention(DLP): before 11.6.200 — fixed in 11.6.200

How to fix

Upgrade to a fixed version: McAfee Data Loss Prevention(DLP) 11.6.200. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-31832 or the next vulnerability affects your stack