Browse CVEs

HIGH 8.4 CVE-2016-3644EPSS 18% The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syma… Norton Security after 2016.0 Fix from $1,9502016-06-30 HIGH 7.8 CVE-2016-2211EPSS 53% The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syma… Mail Security For Microsoft Exchange after 10.6.1-3 Fix from $1,9502016-06-30 HIGH 7.3 CVE-2016-2210EPSS 11% Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server … Mail Security For Microsoft Exchange after 10.6.1-3 Fix from $1,9502016-06-30 HIGH 7.3 CVE-2016-2209EPSS 21% Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (… Mail Security For Microsoft Exchange after 10.6.1-3 Fix from $1,9502016-06-30 HIGH 8.4 CVE-2016-2207EPSS 18% The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syma… Mail Security For Microsoft Exchange after 10.6.1-3 Fix from $1,9502016-06-30 CRITICAL 9.1 CVE-2016-2208EPSS 19% The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a deni… Anti Virus Engine after 20151.1.0.32 Fix from $2,3002016-05-19 HIGH 7.8 CVE-2015-8156 Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileg… Endpoint Encryption Mitigation only Fix from $1,9502016-05-14 HIGH 8.2 CVE-2016-2204 The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted… Messaging Gateway after 10.6.0 Fix from $1,9502016-04-22 HIGH 7.8 CVE-2016-2203EPSS 7% The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by… Messaging Gateway No fix yet Fix from $1,9502016-04-22 MEDIUM 5.5 CVE-2016-2202 The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local us… Altiris It Management Suite after 7.6 Fix from $1,6002016-04-20 HIGH 8.8 CVE-2015-8154EPSS 5% The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4… Endpoint Protection Manager after 12.1 Fix from $1,9502016-03-18 HIGH 8.8 CVE-2015-8153 SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary… Endpoint Protection Manager after 12.1 Fix from $1,9502016-03-18 HIGH 8.0 CVE-2015-8152 Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users … Endpoint Protection Manager after 12.1 Fix from $1,9502016-03-18 CRITICAL 9.1 CVE-2015-8151 Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging conso… Encryption Management Server after 3.3.2 Fix from $2,3002016-02-18 HIGH 7.8 CVE-2015-8150 Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file. Encryption Management Server after 3.3.2 Fix from $1,9502016-02-18 HIGH 7.5 CVE-2015-8148 The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about admi… Encryption Management Server after 3.3.2 Fix from $1,9502016-02-18 HIGH 7.5 CVE-2015-8149 The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory … Encryption Management Server after 3.3.2 Fix from $1,9502016-02-18 MEDIUM 5.0 CVE-2015-4334 The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwards authentication challenges… Proxysg Firmware after 6.6.2.0 Fix from $1,6002015-12-07 HIGH 7.2 CVE-2015-8113 Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privilege… Endpoint Protection after 12.1 Fix from $1,9502015-11-12 HIGH 8.5 CVE-2015-6555 Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the cons… Endpoint Protection Manager after 12.1 Fix from $1,9502015-11-12 HIGH 7.5 CVE-2015-6554 Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data. Endpoint Protection Manager after 12.1 Fix from $1,9502015-11-12 MEDIUM 5.8 CVE-2015-6548 Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 … Web Gateway after 5.2.2 Fix from $1,6002015-09-20 HIGH 8.3 CVE-2015-6547 The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute… Web Gateway after 5.2.2 Fix from $1,9502015-09-20 HIGH 7.9 CVE-2015-5693 The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute… Web Gateway after 5.2.2 Fix from $1,9502015-09-20 HIGH 7.9 CVE-2015-5692EPSS 5% admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenti… Web Gateway after 5.2.2 Fix from $1,9502015-09-20 HIGH 8.5 CVE-2015-5690 The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass … Web Gateway after 5.2.2 Fix from $1,9502015-09-20 MEDIUM 6.8 CVE-2015-5689 ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) befor… Deployment Solution Mitigation only Fix from $1,6002015-09-20 MEDIUM 6.5 CVE-2014-9229 Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow re… Endpoint Protection after 12.1.5 Fix from $1,6002015-09-20 HIGH 8.5 CVE-2015-1492 Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via … Endpoint Protection Manager Mitigation only Fix from $1,9502015-08-01 MEDIUM 6.0 CVE-2015-1491 SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authentic… Endpoint Protection Manager Mitigation only Fix from $1,6002015-08-01