EP
Product
Endpoint Protection
71
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 24Medium 11Low 1
Watch
Add Endpoint Protection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3645 | 9.8 | Jun 30 | Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +1 more |
| CVE-2018-5237 | 8.8 | Jun 20 | Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain… Affected: through 14.0; 12.1; 14.0 |
| CVE-2016-3646 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +1 more |
| CVE-2016-3644 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +1 more |
| CVE-2016-2207 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2020-5837 | 7.8 | May 11 | Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential… Affected: before 14.3 |
| CVE-2020-5836 | 7.8 | May 11 | Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled Affected: before 14.3 |
| CVE-2020-5823 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5822 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5821 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5820 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2016-5311 | 7.8 | Jan 9 | A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,… Affected: before 22.8.0.50 |
| CVE-2019-18372 | 7.8 | Nov 15 | Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise… Affected: through 14.2; 14.2 |
| CVE-2019-12757 | 7.8 | Nov 15 | Symantec Endpoint Protection (SEP), prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to 12.1 RU6 MP10d (12.1.7510.7002),… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2019-12750 | 7.8 | Jul 31 | Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2018-18369 | 7.8 | Apr 25 | Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL… Affected: nis-22.15.2.22; sep-12.1.7484.7002 |
| CVE-2018-12245 | 7.8 | Nov 29 | Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being… Affected: 11.0 through 14.2.0.1 |
| CVE-2018-12238 | 7.8 | Nov 29 | Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 &… Affected: 11.0 before 12.1.7454.7000; 14.0 through 14.2 |
| CVE-2016-9094 | 7.8 | Apr 16 | Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality Affected: through 14.0; 12.1.6 |
| CVE-2017-13681 | 7.8 | Nov 6 | Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated… Affected: before 12.1 |
| CVE-2016-2211 | 7.8 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2016-2210 | 7.3 | Jun 30 | Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2016-2209 | 7.3 | Jun 30 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2017-6331 | 7.1 | Nov 6 | Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for… Affected: before 14.0 |
| CVE-2016-9093 | 7.0 | Apr 16 | A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input Affected: through 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +2 more |
| CVE-2018-12239 | 6.8 | Nov 29 | Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 &… Affected: 11.0 before 12.1.7454.7000; 14.0 through 14.2 |
| CVE-2019-12758 | 6.7 | Nov 15 | Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident… Affected: through 14.2; 14.2 |
| CVE-2018-18366 | 6.5 | Apr 25 | Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817,… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2018-12244 | 6.3 | Apr 25 | SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5826 | 5.5 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5825 | 5.5 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5824 | 5.5 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2017-13680 | 5.5 | Nov 6 | Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform… Affected: before 12.1; 14 |
| CVE-2016-5310 | 5.5 | Apr 14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center… Affected: through 12.1.4; through 12.1.6; through 12.1.6 |
| CVE-2016-5309 | 5.5 | Apr 14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center… Affected: through 12.1.4; through 12.1.6; through 12.1.6 |
| CVE-2018-5236 | 5.3 | Jun 20 | Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard) Affected: through 14.0; 12.1; 14.0 |
| CVE-2019-12756 | 2.3 | Nov 15 | Symantec Endpoint Protection (SEP), prior to 14.2 RU2 may be susceptible to a password protection bypass vulnerability whereby the secondary layer of password protection could by… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2015-8113 | – | Nov 12 | Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a… Affected: through 12.1 |
| CVE-2014-9229 | – | Sep 20 | Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow remote authenticated users to… Affected: through 12.1.5 |
| CVE-2014-9228 | – | Sep 20 | sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a denial of service (blocked system shutdown) by triggering… Affected: through 12.1.5 |
| CVE-2014-9227 | – | Sep 20 | Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local users to gain privileges via a Trojan horse… Affected: through 12.1.5 |
| CVE-2014-3434 | – | Aug 6 | Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local… Affected: 11.0; 12.0; 12.1 |
| CVE-2013-5011 | – | Jan 10 | Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small… Affected: through 11.0.7.3; 11.0; 11.0; 11.0; 11.0; 11.0; +18 more |
| CVE-2013-5010 | – | Jan 10 | The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small… Affected: through 11.0.7.3; 11.0; 11.0; 11.0; 11.0; 11.0; +18 more |
| CVE-2013-5009 | – | Jan 10 | The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2… Affected: through 11.0.7.3; 11.0; 11.0; 11.0; 11.0; 11.0; +18 more |
| CVE-2012-4348 | – | Dec 18 | The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2,… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +22 more |
| CVE-2012-4953 | – | Nov 14 | The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and… Affected: 11.0; 12.0 |
| CVE-2012-1821 | – | May 24 | The Network Threat Protection module in the Manager component in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to… Affected: 11.0.6000; 11.0.6100; 11.0.6200; 11.0.6200.754; 11.0.6300; 11.0.7000; +1 more |
| CVE-2012-0295 | – | May 23 | The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute… Affected: 12.1; 12.1.671; 12.1.1000 |
| CVE-2012-0294 | – | May 23 | Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete… Affected: 12.1; 12.1.671; 12.1.1000 |