Read the docs
TI-2026-73464 Aliases CVE-2026-19810GHSA-7vr8-cmj7-5jj4

Cross-site scripting in Symantec Endpoint Detection and Response

Priority LOW 24CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Broadcom Symantec Endpoint Detection and Response (SEDR) Console from 4.12 before 4.13 has a cross-site scripting flaw (CWE-79). Improper neutralization of input lets an attacker inject script that runs in another user's session. An attacker needs low privileges and must get a user to interact with the page, and can then reach functionality or information normally restricted to that user.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00172 6th percentileScored 2026-11-07
Fix Fixed Symantec Endpoint Detection and Response (Broadcom): 4.13

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BroadcomSymantec Endpoint Detection and Response4.124.13Patch availableCNA
  • Symantec Endpoint Detection and Response VendorBroadcom Affected 4.12 Fixed in 4.13 Patch available CNA

Remediation

Upgrade Symantec Endpoint Detection and Response to version 4.13.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

  • Fix · CNA Symantec Endpoint Detection and Response (Broadcom) Fixed in 4.13

Timeline

  1. 2026-10-13 Threatist record created from CVE-2026-19810
  2. 2026-10-13 Alias added: GHSA-7vr8-cmj7-5jj4
  3. 2026-10-14 Priority changed: MEDIUM → LOW
  4. 2026-10-15 CISA SSVC decision points changed

References

Other 1

  • TI-2026-42442 vCenter directory-traversal vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-01178 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
  • TI-2025-01721 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 KEVCVSS 4.0HIGH 8.6
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 873 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences