Browse CVEs

MEDIUM 5.4 CVE-2023-23957 An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4 Identity Portal No fix yet Fix from $1,6002023-09-19 HIGH 7.8 CVE-2022-25623 The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM lev… Management Agent Mitigation only Fix from $1,9502022-03-04 MEDIUM 5.9 CVE-2019-18376 A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or … Management Center Mitigation only Fix from $1,6002020-04-10 MEDIUM 5.5 CVE-2020-5826 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,6002020-02-11 HIGH 7.8 CVE-2020-5820 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,9502020-02-11 HIGH 7.8 CVE-2020-5821 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,9502020-02-11 HIGH 7.8 CVE-2020-5822 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,9502020-02-11 HIGH 7.8 CVE-2020-5823 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,9502020-02-11 MEDIUM 5.5 CVE-2020-5824 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,6002020-02-11 MEDIUM 5.5 CVE-2020-5825 Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.21… Endpoint Protection Mitigation only Fix from $1,6002020-02-11 MEDIUM 5.4 CVE-2016-6588 A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0. It Management Suite Mitigation only Fix from $1,6002020-01-08 MEDIUM 6.5 CVE-2016-6589 A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0. It Management Suite No fix yet Fix from $1,6002020-01-08 HIGH 7.8 CVE-2019-12757 Symantec Endpoint Protection (SEP), prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to 12.1… Endpoint Protection Mitigation only Fix from $1,9502019-11-15 HIGH 7.8 CVE-2019-12750 Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.… Endpoint Protection No fix yet Fix from $1,9502019-07-31 HIGH 7.8 CVE-2018-18367 Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerab… Endpoint Protection Manager Mitigation only Fix from $1,9502019-04-25 MEDIUM 6.3 CVE-2018-12244 SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection… Endpoint Protection Mitigation only Fix from $1,6002019-04-25 HIGH 7.8 CVE-2019-9694 Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an … Endpoint Encryption Mitigation only Fix from $1,9502019-04-10 HIGH 7.3 CVE-2018-18364 Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a… Ghost Solution Suite Mitigation only Fix from $1,9502019-02-08 MEDIUM 5.7 CVE-2017-13683 In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program incorrec… Endpoint Encryption Mitigation only Fix from $1,6002017-10-23 HIGH 7.8 CVE-2017-13674 Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circum… Proxyclient Mitigation only Fix from $1,9502017-09-01 HIGH 8.8 CVE-2016-9092 The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site r… Content Analysis Mitigation only Fix from $1,9502017-05-11 MEDIUM 5.7 CVE-2016-2206 The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization … Workspace Streaming Mitigation only Fix from $1,6002016-07-12 MEDIUM 5.7 CVE-2016-2205 Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.5.x befor… Workspace Streaming Mitigation only Fix from $1,6002016-07-12 HIGH 7.8 CVE-2015-8156 Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileg… Endpoint Encryption Mitigation only Fix from $1,9502016-05-14 HIGH 7.8 CVE-2016-2203EPSS 7% The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by… Messaging Gateway No fix yet Fix from $1,9502016-04-22 MEDIUM 6.8 CVE-2015-5689 ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) befor… Deployment Solution Mitigation only Fix from $1,6002015-09-20 HIGH 8.5 CVE-2015-1492 Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via … Endpoint Protection Manager Mitigation only Fix from $1,9502015-08-01 MEDIUM 6.0 CVE-2015-1491 SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authentic… Endpoint Protection Manager Mitigation only Fix from $1,6002015-08-01 MEDIUM 5.5 CVE-2015-1490 Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote aut… Endpoint Protection Manager Mitigation only Fix from $1,6002015-08-01 HIGH 8.5 CVE-2015-1489EPSS 25% The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges v… Endpoint Protection Manager No fix yet Fix from $1,9502015-08-01