EP
Product
Endpoint Protection Manager
41
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 7Low 7
Watch
Add Endpoint Protection Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3650 | 8.8 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack Affected: through 12.1.6 |
| CVE-2016-3648 | 8.8 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechanism, and conduct brute-force… Affected: through 12.1.6 |
| CVE-2015-8154 | 8.8 | Mar 18 | The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4 allows remote attackers to… Affected: through 12.1 |
| CVE-2015-8153 | 8.8 | Mar 18 | SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary SQL commands via unspecified… Affected: through 12.1 |
| CVE-2016-3653 | 8.0 | Jun 30 | Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated… Affected: through 12.1.6 |
| CVE-2016-3651 | 8.0 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors Affected: through 12.1.6 |
| CVE-2015-8152 | 8.0 | Mar 18 | Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication… Affected: through 12.1 |
| CVE-2019-12759 | 7.8 | Nov 15 | Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for MS Exchange (SMSMSE), prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a… Affected: through 14.2; 14.2 |
| CVE-2018-18368 | 7.8 | Nov 15 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may… Affected: through 14.2 |
| CVE-2018-18367 | 7.8 | Apr 25 | Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of… Affected: 12.1; 12.1; 12.1; 12.1; 12.1; 12.1; +26 more |
| CVE-2016-3647 | 7.7 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network… Affected: through 12.1.6 |
| CVE-2020-5835 | 7.0 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine Affected: before 14.3 |
| CVE-2016-5304 | 6.8 | Jun 30 | Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to… Affected: through 12.1.6 |
| CVE-2016-5305 | 5.4 | Jun 30 | Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to… Affected: through 12.1.6 |
| CVE-2016-3652 | 5.4 | Jun 30 | Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to… Affected: through 12.1.6 |
| CVE-2020-5834 | 5.3 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the… Affected: before 14.3 |
| CVE-2016-5306 | 5.3 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain… Affected: through 12.1.6 |
| CVE-2016-5307 | 4.3 | Jun 30 | Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root… Affected: through 12.1.6 |
| CVE-2016-3649 | 4.3 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests Affected: through 12.1.6 |
| CVE-2020-5833 | 3.3 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading… Affected: before 14.3 |
| CVE-2020-5831 | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… Affected: before 14.2; 14.2; 14.2; 14.2; 14.2; 14.2 |
| CVE-2020-5830 | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… Affected: before 14.2; 14.2; 14.2; 14.2; 14.2; 14.2 |
| CVE-2020-5829 | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… Affected: before 14.2; 14.2; 14.2; 14.2; 14.2; 14.2 |
| CVE-2020-5828 | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… Affected: before 14.2; 14.2; 14.2; 14.2; 14.2; 14.2 |
| CVE-2020-5827 | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… Affected: before 14.2; 14.2; 14.2; 14.2; 14.2; 14.2 |
| CVE-2015-8801 | 2.9 | Jun 30 | Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting… Affected: through 12.1.6 |
| CVE-2015-6555 | – | Nov 12 | Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port Affected: through 12.1 |
| CVE-2015-6554 | – | Nov 12 | Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data Affected: through 12.1 |
| CVE-2015-1492 | – | Aug 1 | Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client… Affected: 12.1.0 |
| CVE-2015-1491 | – | Aug 1 | SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute… Affected: 12.1.0 |
| CVE-2015-1490 | – | Aug 1 | Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read… Affected: 12.1.0 |
| CVE-2015-1489 | – | Aug 1 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors Affected: 12.1.0 |
| CVE-2015-1488 | – | Aug 1 | An unspecified action handler in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary… Affected: 12.1.0 |
| CVE-2015-1487 | – | Aug 1 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently… Affected: 12.1.0 |
| CVE-2015-1486 | – | Aug 1 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action… Affected: 12.1.0 |
| CVE-2014-3439 | – | Nov 7 | ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors Affected: through 12.1.4; 12.1.0; 12.1.1; 12.1.2; 12.1.3 |
| CVE-2014-3438 | – | Nov 7 | Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject… Affected: through 12.1.4; 12.1.0; 12.1.1; 12.1.2; 12.1.3 |
| CVE-2014-3437 | – | Nov 7 | The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via… Affected: through 12.1.4; 12.1.0; 12.1.1; 12.1.2; 12.1.3 |
| CVE-2013-5015 | – | Feb 14 | SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec… Affected: 11.0; 12.1.0; 12.1.1; 12.1.2; 12.1.3 |
| CVE-2013-5014 | – | Feb 14 | The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business… Affected: 11.0; 12.1.0; 12.1.1; 12.1.2; 12.1.3 |
| CVE-2013-1612 | – | Jun 20 | Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small… Affected: 12.1.0; 12.1.1; 12.1.2 |
Showing 41