Read the docs
TI-2019-07099 Aliases CVE-2019-9700GHSA-mjfm-528c-86p5

Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing…

Priority LOW 18Published · Updated

Key facts

Attack vector
Physical
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic.

Why it matters now

EPSS 0.00262 18th percentileScored 2026-11-07
Fix Fixed Norton Password Manager (Norton): 6.3.0.2082

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
NortonNorton Password Managerbefore 6.3.0.20826.3.0.2082Patch availableCNA
  • Norton Password Manager VendorNorton Affected before 6.3.0.2082 Fixed in 6.3.0.2082 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:norton:password_manager:*:*:*:*:*:iphone_os:*:*before 6.2.309VulnerableNorton
cpe:2.3:a:norton:password_manager:*:*:*:*:*:android:*:*before 6.3.0.2082VulnerableNorton
  • cpe:2.3:a:norton:password_manager:*:*:*:*:*:iphone_os:*:* Versions before 6.2.309 Vulnerable ·Norton
  • cpe:2.3:a:norton:password_manager:*:*:*:*:*:android:*:* Versions before 6.3.0.2082 Vulnerable ·Norton

Remediation

  • Fix · CNA Norton Password Manager (Norton) Fixed in 6.3.0.2082

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-9700
  2. 2026-10-03 Alias added: GHSA-mjfm-528c-86p5

References

Advisory 1

  • TI-2019-14088 Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information… CVSS 3.1MEDIUM 6.5
  • TI-2019-14087 Origin validation error in Norton Password Manager CVSS 3.1MEDIUM 6.3
  • TI-2019-13384 Origin validation error in Norton Password Manager CVSS 3.1MEDIUM 6.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences