Symantec Critical System Protection vulnerabilities

Product

Symantec Critical System Protection

by Broadcom · last CVE Nov 25, 2019

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 4Medium 0Low 0

Severity

All severities11 Critical1 High4 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Symantec Critical System Protection to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-18374	9.8	2%	Nov 25	Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can… Affected: 8.0.0; 8.0.0; 8.0.0
CVE-2015-8157	8.8	2%	Jun 8	SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System… Affected: through 5.2.9
CVE-2015-8798	8.0	2%	Jun 8	Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical… Affected: through 5.2.9
CVE-2015-8799	7.6	5%	Jun 8	Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical… Affected: through 5.2.9
CVE-2015-8800	7.3	1%	Jun 8	Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0… Affected: 5.2.9
CVE-2014-9226	–	2%	Jan 21	The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows… Affected: 5.2.9
CVE-2014-9225	–	9%	Jan 21	The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x… Affected: 5.2.9
CVE-2014-9224	–	5%	Jan 21	Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9… Affected: 5.2.9
CVE-2014-7289	–	5%	Jan 21	SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA)… Affected: 5.2.9
CVE-2014-3440	–	3%	Jan 21	The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA)… Affected: 5.2.9
CVE-2013-5016	–	2%	May 8	Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via… Affected: through 5.2.8