Symantec

Records598All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical93CVSS 9.0–10.0

CVSS high193CVSS 7.0–8.9

Exploited now

Symantec records in CISA KEV

TI-2017-04157 Symantec Messaging Gateway Remote Code Execution Vulnerability CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Endpoint Protection 71 records CRITICAL Norton Antivirus 67 records HIGH Endpoint Protection Manager 41 records HIGH Norton Internet Security 40 records HIGH Web Gateway 35 records HIGH Client Security 27 records CRITICAL Messaging Gateway 25 records HIGH Altiris Deployment Solution 24 records HIGH

Records

9 records in Encryption Management Server · all components

TI-2014-06071 CVE-2014-7288 · GHSA-3m8f-763m-9wm9

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow…

MEDIUM 50

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.08116 Published 2015-02-01 No fix listed CWE-264

TI-2015-06759 CVE-2015-8151 · GHSA-cc8p-8p4m-65r7

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote…

MEDIUM 43

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01623 Published 2016-02-18 No fix listed CWE-78

TI-2018-03800 CVE-2018-5243 · GHSA-w8qw-x88f-f35r

Uncontrolled resource consumption in Symantec Encryption Management Server

LOW 36

The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01768 Published 2018-08-20 No fix listed CWE-400

TI-2015-06757 CVE-2015-8149 · GHSA-f3m5-ch6q-9pr2

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows…

LOW 36

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory corruption and service outage) via crafted requests.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01691 Published 2016-02-18 No fix listed CWE-119

TI-2015-06756 CVE-2015-8148 · GHSA-xgxc-3m22-3xcf

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows…

LOW 36

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01601 Published 2016-02-18 No fix listed CWE-200

TI-2015-06758 CVE-2015-8150 · GHSA-3wmm-v973-qmxx

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to…

LOW 34

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00277 Published 2016-02-18 No fix listed CWE-264

TI-2014-06070 CVE-2014-7287 · GHSA-2328-vc59-64q8

The key-management component in Symantec PGP Universal Server and Encryption Management…

LOW 25

The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID valu…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0111 Published 2015-02-01 No fix listed CWE-74

TI-2013-04097 CVE-2013-4674 · GHSA-5hmv-vv26-wxmx

Cross-site scripting (XSS) vulnerability in the Web Email Protection component in…

LOW 22

Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote authenticated users to injec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00886 Published 2013-07-31 No fix listed CWE-79

TI-2014-01276 CVE-2014-1643 · GHSA-39h8-w6xg-pm7c

The Web Email Protection component in Symantec Encryption Management Server (aka PGP…

LOW 20

The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a m…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00747 Published 2014-02-07 No fix listed CWE-264

Open these records in search →