EP
Product
Endpoint Protection
71
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 24Medium 11Low 1
Watch
Add Endpoint Protection to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5237 | 8.8 | Jun 20 | Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain… Affected: through 14.0; 12.1; 14.0 |
| CVE-2016-3646 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +1 more |
| CVE-2016-3644 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +1 more |
| CVE-2016-2207 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2020-5837 | 7.8 | May 11 | Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential… Affected: before 14.3 |
| CVE-2020-5836 | 7.8 | May 11 | Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled Affected: before 14.3 |
| CVE-2020-5823 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5822 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5821 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2020-5820 | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2016-5311 | 7.8 | Jan 9 | A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,… Affected: before 22.8.0.50 |
| CVE-2019-18372 | 7.8 | Nov 15 | Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise… Affected: through 14.2; 14.2 |
| CVE-2019-12757 | 7.8 | Nov 15 | Symantec Endpoint Protection (SEP), prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to 12.1 RU6 MP10d (12.1.7510.7002),… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2019-12750 | 7.8 | Jul 31 | Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be… Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more |
| CVE-2018-18369 | 7.8 | Apr 25 | Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL… Affected: nis-22.15.2.22; sep-12.1.7484.7002 |
| CVE-2018-12245 | 7.8 | Nov 29 | Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being… Affected: 11.0 through 14.2.0.1 |
| CVE-2018-12238 | 7.8 | Nov 29 | Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 &… Affected: 11.0 before 12.1.7454.7000; 14.0 through 14.2 |
| CVE-2016-9094 | 7.8 | Apr 16 | Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality Affected: through 14.0; 12.1.6 |
| CVE-2017-13681 | 7.8 | Nov 6 | Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated… Affected: before 12.1 |
| CVE-2016-2211 | 7.8 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2016-2210 | 7.3 | Jun 30 | Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2016-2209 | 7.3 | Jun 30 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +4 more |
| CVE-2017-6331 | 7.1 | Nov 6 | Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for… Affected: before 14.0 |
| CVE-2016-9093 | 7.0 | Apr 16 | A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input Affected: through 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; 12.1.6; +2 more |
Showing 24