Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Broadcom Component: Symantec Critical System Protection Clear all filters
TI-2019-13377 CVE-2019-18374 · GHSA-8j5m-96p7-j6g4

Improper authentication in Symantec Critical System Protection

Priority MEDIUM 45

Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent e…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2019-11-25 No fix listed CWE-287
TI-2015-07246 CVE-2015-8800 · GHSA-jgv7-7943-grr9

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5…

Priority LOW 34

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCS…

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.01175 Published 2016-06-08 No fix listed CWE-74
TI-2015-07245 CVE-2015-8799 · GHSA-rjp4-gcx6-p65v

Directory traversal vulnerability in the Management Server in Symantec Embedded Security…

Priority MEDIUM 41

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devic…

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.05258 Published 2016-06-08 No fix listed CWE-22
TI-2015-07244 CVE-2015-8798 · GHSA-7m45-rxr2-jh3h

Directory traversal vulnerability in the Management Server in Symantec Embedded Security…

Priority LOW 39

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devic…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02411 Published 2016-06-08 No fix listed CWE-22
TI-2015-06764 CVE-2015-8157 · GHSA-w8c7-26w6-xx7c

SQL injection vulnerability in the Management Server in Symantec Embedded Security…

Priority MEDIUM 41

SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SE…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01505 Published 2016-06-08 No fix listed CWE-89
TI-2014-07489 CVE-2014-9225 · GHSA-vm75-p2wg-q736

The ajaxswing webui in the management server in Symantec Critical System Protection…

Priority LOW 31

The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0922 Published 2015-01-21 No fix listed CWE-200
TI-2014-07488 CVE-2014-9224 · GHSA-4jgr-5qw5-7m4m

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security:…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.04591 Published 2015-01-21 No fix listed CWE-79
TI-2014-06072 CVE-2014-7289 · GHSA-4pp2-m693-v6x9

SQL injection vulnerability in the management server in Symantec Critical System…

Priority LOW 36

SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenti…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04554 Published 2015-01-21 No fix listed CWE-89
TI-2014-02770 CVE-2014-3440 · GHSA-h4qp-ph3r-9hj4

The Agent Control Interface in the management server in Symantec Critical System…

Priority MEDIUM 45

The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenti…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03306 Published 2015-01-21 No fix listed CWE-20