Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

symantec endpoint protection manager 12.1.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2014-3438
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection ManagerSymantec Endpoint Protection Manager 12.1.0
7.5
CVSSv2
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote malicious users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, rel...
Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection Manager
6.1
CVSSv2
CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote malicious users to write to arbitrary files via unspecified vectors.
Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection ManagerSymantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2
7.5
CVSSv2
CVE-2013-5014
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 prior to 11.0.7405.1424 and 12.1 prior to 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x prior to 12.1.4023.4080, allows remote malicious users to read arbitrary files via XML d...
Symantec Protection Center 12.0Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 11.0Symantec Endpoint Protection Manager 12.1.3Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2
6.5
CVSSv2
CVE-2013-5015
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 prior to 11.0.7405.1424 and 12.1 prior to 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x prior to 12.1.4023.4080, allows remote authenticated user...
Symantec Endpoint Protection Manager 11.0Symantec Protection Center 12.0Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Manager 12.1.3
7.9
CVSSv2
CVE-2013-1612
Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x prior to 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote malicious users to execute arbitrary code via unspecified vect...
Symantec Endpoint Protection Manager 12.1.0Symantec Endpoint Protection Manager 12.1.1Symantec Endpoint Protection Manager 12.1.2Symantec Endpoint Protection Center 12.0.1Symantec Endpoint Protection Center 12.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook