SY
Vendor
Symantec
1,106
CVEs
2
On KEV
0
New 30D
Products
MG9.8
Message Gateway
Symantec
10 CVEs1 on KEV0 new
SM8.8
Symantec Messaging Gateway
Symantec
1 CVEs1 on KEV0 new
EP9.8
Endpoint Protection
Symantec
71 CVEs0 on KEV0 new
NA9.8
Norton Antivirus
Symantec
67 CVEs0 on KEV0 new
EP8.8
Endpoint Protection Manager
Symantec
41 CVEs0 on KEV0 new
NI9.8
Norton Internet Security
Symantec
40 CVEs0 on KEV0 new
WG9.8
Web Gateway
Symantec
35 CVEs0 on KEV0 new
CS–
Client Security
Symantec
27 CVEs0 on KEV0 new
MG10.0
Messaging Gateway
Symantec
25 CVEs0 on KEV0 new
AD7.8
Altiris Deployment Solution
Symantec
24 CVEs0 on KEV0 new
MS7.8
Mail Security
Symantec
19 CVEs0 on KEV0 new
NS–
Norton System Works
Symantec
19 CVEs0 on KEV0 new
NP–
Norton Personal Firewall
Symantec
18 CVEs0 on KEV0 new
PC–
Pcanywhere
Symantec
18 CVEs0 on KEV0 new
AN–
Antivirus
Symantec
15 CVEs0 on KEV0 new
EF–
Enterprise Firewall
Symantec
15 CVEs0 on KEV0 new
N39.8
Norton 360
Symantec
14 CVEs0 on KEV0 new
NG5.5
Norton Ghost
Symantec
13 CVEs0 on KEV0 new
ED7.8
Encryption Desktop
Symantec
11 CVEs0 on KEV0 new
AS7.0
Antivirus Scan Engine
Symantec
10 CVEs0 on KEV0 new
EE7.8
Endpoint Encryption
Symantec
10 CVEs0 on KEV0 new
NS9.8
Norton Security
Symantec
10 CVEs0 on KEV0 new
PE9.8
Protection Engine
Symantec
10 CVEs0 on KEV0 new
AT9.8
Advanced Threat Protection
Symantec
9 CVEs0 on KEV0 new
BA–
Brightmail Antispam
Symantec
9 CVEs0 on KEV0 new
CS9.8
Csapi
Symantec
9 CVEs0 on KEV0 new
EM9.1
Encryption Management Server
Symantec
9 CVEs0 on KEV0 new
MS9.8
Mail Security For Domino
Symantec
9 CVEs0 on KEV0 new
MS9.8
Mail Security For Microsoft Exchange
Symantec
9 CVEs0 on KEV0 new
PF9.8
Protection For Sharepoint Servers
Symantec
9 CVEs0 on KEV0 new
BS–
Backupexec System Recovery
Symantec
8 CVEs0 on KEV0 new
GS–
Gateway Security
Symantec
8 CVEs0 on KEV0 new
NP9.8
Norton Power Eraser
Symantec
8 CVEs0 on KEV0 new
NS9.8
Norton Security With Backup
Symantec
8 CVEs0 on KEV0 new
SP–
Sygate Personal Firewall
Symantec
8 CVEs0 on KEV0 new
DC9.8
Data Center Security Server
Symantec
7 CVEs0 on KEV0 new
EP7.8
Endpoint Protection Cloud
Symantec
7 CVEs0 on KEV0 new
GS–
Gateway Security 5400
Symantec
7 CVEs0 on KEV0 new
GS–
Ghost Solutions Suite
Symantec
7 CVEs0 on KEV0 new
MG9.8
Message Gateway For Service Providers
Symantec
7 CVEs0 on KEV0 new
NG9.8
Ngc
Symantec
7 CVEs0 on KEV0 new
NB9.8
Norton Bootable Removal Tool
Symantec
7 CVEs0 on KEV0 new
PD–
Pgp Desktop
Symantec
7 CVEs0 on KEV0 new
VE–
Velociraptor
Symantec
7 CVEs0 on KEV0 new
WS–
Web Security
Symantec
7 CVEs0 on KEV0 new
AN–
Altiris Notification Server
Symantec
6 CVEs0 on KEV0 new
AC–
Antivirus Central Quarantine Server
Symantec
6 CVEs0 on KEV0 new
DC7.8
Data Center Security
Symantec
6 CVEs0 on KEV0 new
FV–
Firewall Vpn Appliance 100
Symantec
6 CVEs0 on KEV0 new
FV–
Firewall Vpn Appliance 200
Symantec
6 CVEs0 on KEV0 new
FV–
Firewall Vpn Appliance 200r
Symantec
6 CVEs0 on KEV0 new
IM–
IM Manager
Symantec
6 CVEs0 on KEV0 new
NA–
Norton Antispam
Symantec
6 CVEs0 on KEV0 new
NA7.1
Norton App Lock
Symantec
6 CVEs0 on KEV0 new
RF–
Raptor Firewall
Symantec
6 CVEs0 on KEV0 new
SC–
System Center
Symantec
6 CVEs0 on KEV0 new
WG–
Web Gateway Appliance 8450
Symantec
6 CVEs0 on KEV0 new
WG–
Web Gateway Appliance 8490
Symantec
6 CVEs0 on KEV0 new
BE–
Backup Exec
Symantec
5 CVEs0 on KEV0 new
LI9.8
Liveupdate
Symantec
5 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-8501 | PT PC Tools Internet Security Symantec | 7.8 | Jun 1 | No description published yet |
| CVE-2023-23958 | PE Protection Engine Symantec | 6.5 | Sep 27 | Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability |
| CVE-2023-23957 | IP Identity Portal Symantec | 5.4 | Sep 19 | An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4 |
| CVE-2022-25630 | MG Messaging Gateway Symantec | 5.4 | Dec 9 | An authenticated user can embed malicious content with XSS into the admin group policy page |
| CVE-2022-25629 | MG Messaging Gateway Symantec | 5.4 | Dec 9 | An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation… |
| CVE-2022-37015 | ED Endpoint Detection And Response Symantec | 9.8 | Nov 8 | Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker… |
| CVE-2022-25623 | MA Management Agent Symantec | 7.8 | Mar 4 | The Symantec Management Agent is susceptible to a privilege escalation vulnerability |
| CVE-2021-30642 | SA Security Analytics Symantec | 9.8 | Apr 27 | An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated… |
| CVE-2020-12593 | ED Endpoint Detection And Response Symantec | 7.5 | Nov 18 | Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow… |
| CVE-2020-5839 | ED Endpoint Detection And Response Symantec | 7.5 | Jul 8 | Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow… |
| CVE-2020-5838 | IA IT Analytics Symantec | 4.8 | May 13 | Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can potentially enable attackers to inject… |
| CVE-2020-5837 | EP Endpoint Protection Symantec | 7.8 | May 11 | Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential… |
| CVE-2020-5836 | EP Endpoint Protection Symantec | 7.8 | May 11 | Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled |
| CVE-2020-5835 | EP Endpoint Protection Manager Symantec | 7.0 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine |
| CVE-2020-5834 | EP Endpoint Protection Manager Symantec | 5.3 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the… |
| CVE-2020-5833 | EP Endpoint Protection Manager Symantec | 3.3 | May 11 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading… |
| CVE-2019-18376 | MC Management Center Symantec | 5.9 | Apr 10 | A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that… |
| CVE-2020-5832 | DC Data Center Security Symantec | 7.8 | Apr 6 | Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an… |
| CVE-2012-6277 | DL Data Loss Prevention Endpoint Symantec | 7.8 | Feb 21 | Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for… |
| CVE-2020-5831 | EP Endpoint Protection Manager Symantec | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… |
| CVE-2020-5830 | EP Endpoint Protection Manager Symantec | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… |
| CVE-2020-5829 | EP Endpoint Protection Manager Symantec | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… |
| CVE-2020-5828 | EP Endpoint Protection Manager Symantec | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… |
| CVE-2020-5827 | EP Endpoint Protection Manager Symantec | 3.3 | Feb 11 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing… |
| CVE-2020-5826 | EP Endpoint Protection Symantec | 5.5 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2020-5825 | EP Endpoint Protection Symantec | 5.5 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2020-5824 | EP Endpoint Protection Symantec | 5.5 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2020-5823 | EP Endpoint Protection Symantec | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2020-5822 | EP Endpoint Protection Symantec | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2020-5821 | EP Endpoint Protection Symantec | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2020-5820 | EP Endpoint Protection Symantec | 7.8 | Feb 11 | Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be… |
| CVE-2016-6592 | ND Norton Download Manager Symantec | 7.8 | Jan 14 | A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6 |
| CVE-2019-19547 | ED Endpoint Detection And Response Symantec | 6.1 | Jan 13 | Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue |
| CVE-2016-5311 | EP Endpoint Protection Symantec | 7.8 | Jan 9 | A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,… |
| CVE-2016-6585 | NM Norton Mobile Security Symantec | 5.3 | Jan 8 | A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack… |
| CVE-2016-6587 | NM Norton Mobile Security Symantec | 5.5 | Jan 8 | An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local… |
| CVE-2016-6588 | IM IT Management Suite Symantec | 5.4 | Jan 8 | A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0 |
| CVE-2016-6586 | NM Norton Mobile Security Symantec | 3.7 | Jan 8 | A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially… |
| CVE-2016-6593 | VA Vip Access Desktop Symantec | 7.8 | Jan 8 | A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary… |
| CVE-2016-6591 | NA Norton App Lock Symantec | 7.1 | Jan 8 | A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious user bypass security… |
| CVE-2016-6590 | IM IT Management Suite Symantec | 7.8 | Jan 8 | A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7,… |
| CVE-2016-6589 | IM IT Management Suite Symantec | 6.5 | Jan 8 | A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0 |
| CVE-2019-18379 | MG Messaging Gateway Symantec | 7.3 | Dec 11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attacker send crafted… |
| CVE-2019-18378 | MG Messaging Gateway Symantec | 4.8 | Dec 11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side… |
| CVE-2019-18377 | MG Messaging Gateway Symantec | 7.2 | Dec 11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the… |
| CVE-2019-18380 | IC Industrial Control System Protection Symantec | 6.5 | Dec 9 | Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or… |
| CVE-2019-18373 | NA Norton App Lock Symantec | 5.6 | Nov 18 | Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit |
| CVE-2019-18372 | EP Endpoint Protection Symantec | 7.8 | Nov 15 | Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise… |
| CVE-2019-12759 | EP Endpoint Protection Manager Symantec | 7.8 | Nov 15 | Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for MS Exchange (SMSMSE), prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a… |
| CVE-2019-12758 | EP Endpoint Protection Symantec | 6.7 | Nov 15 | Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident… |
| CVE-2019-12757 | EP Endpoint Protection Symantec | 7.8 | Nov 15 | Symantec Endpoint Protection (SEP), prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to 12.1 RU6 MP10d (12.1.7510.7002),… |
| CVE-2019-12756 | EP Endpoint Protection Symantec | 2.3 | Nov 15 | Symantec Endpoint Protection (SEP), prior to 14.2 RU2 may be susceptible to a password protection bypass vulnerability whereby the secondary layer of password protection could by… |
| CVE-2018-18368 | EP Endpoint Protection Manager Symantec | 7.8 | Nov 15 | Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may… |
| CVE-2019-12752 | SO Sonar Symantec | 6.1 | Nov 1 | The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing… |
| CVE-2019-9699 | MG Messaging Gateway Symantec | 4.5 | Oct 24 | Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized… |
| CVE-2019-12755 | NP Norton Password Manager Symantec | 5.5 | Sep 17 | Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure… |
| CVE-2019-9697 | MC Management Center Symantec | 6.5 | Aug 30 | An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for… |
| CVE-2019-12754 | VI Vip Symantec | 4.8 | Aug 30 | Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable… |
| CVE-2019-12753 | RE Reporter Symantec | 4.9 | Aug 30 | An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator user to obtain passwords for external… |
| CVE-2019-12750 | EP Endpoint Protection Symantec | 7.8 | Jul 31 | Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be… |