EP
Product
Endpoint Protection Manager
41
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 7Low 7
Watch
Add Endpoint Protection Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5304 | 6.8 | Jun 30 | Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to… Affected: through 12.1.6 |
| CVE-2016-5305 | 5.4 | Jun 30 | Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to… Affected: through 12.1.6 |
| CVE-2016-3652 | 5.4 | Jun 30 | Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to… Affected: through 12.1.6 |
| CVE-2020-5834 | 5.3 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the… Affected: before 14.3 |
| CVE-2016-5306 | 5.3 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain… Affected: through 12.1.6 |
| CVE-2016-5307 | 4.3 | Jun 30 | Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root… Affected: through 12.1.6 |
| CVE-2016-3649 | 4.3 | Jun 30 | Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests Affected: through 12.1.6 |
Showing 7
