Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

symantec endpoint protection manager 12.1 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2018-18367
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and before 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malic...
Symantec Endpoint Protection Manager 14.0.1Symantec Endpoint Protection Manager 14.1Symantec Endpoint Protection Manager 12.1Symantec Endpoint Protection Manager 14Symantec Endpoint Protection Manager 14.2
7.9
CVSSv2
CVE-2013-1612
Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x prior to 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote malicious users to execute arbitrary code via unspecified vect...
Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Center 12.0.1Symantec Endpoint Protection Center 12.0.0
7.5
CVSSv2
CVE-2013-5014
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 prior to 11.0.7405.1424 and 12.1 prior to 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x prior to 12.1.4023.4080, allows remote malicious users to read arbitrary files via XML d...
Symantec Protection Center 12.0Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 11.0Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2
6.5
CVSSv2
CVE-2013-5015
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 prior to 11.0.7405.1424 and 12.1 prior to 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x prior to 12.1.4023.4080, allows remote authenticated user...
Symantec Endpoint Protection Manager 11.0Symantec Protection Center 12.0Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Manager 12.1.3
6.1
CVSSv2
CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote malicious users to write to arbitrary files via unspecified vectors.
Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection ManagerSymantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2
5.8
CVSSv2
CVE-2012-0294
Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 prior to 12.1 RU1-MP1 allows remote malicious users to delete files via unspecified vectors.
Symantec Endpoint Protection 12.1Symantec Endpoint Protection 12.1.671Symantec Endpoint Protection 12.1.1000
4.3
CVSSv2
CVE-2014-3438
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection ManagerSymantec Endpoint Protection Manager 12.1.0
9.3
CVSSv2
CVE-2012-0295
The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 prior to 12.1 RU1-MP1 allows remote malicious users to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.
Symantec Endpoint Protection 12.1Symantec Endpoint Protection 12.1.671Symantec Endpoint Protection 12.1.1000
7.5
CVSSv2
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote malicious users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, rel...
Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection Manager
4.9
CVSSv2
CVE-2016-5304
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Symantec Endpoint Protection Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook