EP
Product
Endpoint Protection Manager
41
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 7Low 7
Watch
Add Endpoint Protection Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3650 | 8.8 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack Affected: through 12.1.6 |
| CVE-2016-3648 | 8.8 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and conduct brute-force… Affected: through 12.1.6 |
| CVE-2015-8154 | 8.8 | Mar 18 | The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4 allows remote attackers to… Affected: through 12.1 |
| CVE-2015-8153 | 8.8 | Mar 18 | SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary SQL commands via unspecified… Affected: through 12.1 |
| CVE-2016-3653 | 8.0 | Jun 30 | Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated… Affected: through 12.1.6 |
| CVE-2016-3651 | 8.0 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors Affected: through 12.1.6 |
| CVE-2015-8152 | 8.0 | Mar 18 | Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication… Affected: through 12.1 |
| CVE-2019-12759 | 7.8 | Nov 15 | Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for MS Exchange (SMSMSE), prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a… Affected: through 14.2; 14.2 |
| CVE-2018-18368 | 7.8 | Nov 15 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may… Affected: through 14.2 |
| CVE-2018-18367 | 7.8 | Apr 25 | Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of… Affected: 12.1; 12.1; 12.1; 12.1; 12.1; 12.1; +26 more |
| CVE-2016-3647 | 7.7 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network… Affected: through 12.1.6 |
| CVE-2020-5835 | 7.0 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine Affected: before 14.3 |
Showing 12