Symantec : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-25623	269			2022-03-04	2022-03-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM level through registry manipulations.
2	CVE-2019-18379	918			2019-12-11	2019-12-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attacker send crafted requests from the backend server of a vulnerable web application or access services available through the loopback interface.
3	CVE-2019-18372			+Priv	2019-11-15	2020-08-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
4	CVE-2019-12759			+Priv	2019-11-15	2020-08-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for MS Exchange (SMSMSE), prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
5	CVE-2019-12758	427		Exec Code	2019-11-15	2020-08-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature.
6	CVE-2019-12751			+Priv	2019-07-11	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
7	CVE-2018-18363			Bypass	2019-01-24	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Norton App Lock prior to 1.4.0.445 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.
8	CVE-2018-12242	287		Bypass	2018-09-19	2018-12-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network.
9	CVE-2018-5242			Bypass	2018-06-13	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.
10	CVE-2018-5239			Bypass	2018-07-16	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.
11	CVE-2017-15534	287		Bypass	2018-03-26	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of circumstance, the exploit can allow the user to kill the app to prevent it from locking the device, thereby allowing the individual to gain device access.
12	CVE-2017-13674			Exec Code	2017-09-01	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges.
13	CVE-2017-6324			Bypass	2017-06-26	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.
14	CVE-2015-8156			+Priv	2016-05-14	2016-05-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
15	CVE-2015-8113			+Priv	2015-11-12	2015-11-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492.
16	CVE-2015-6554	78		Exec Code	2015-11-12	2016-12-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data.
17	CVE-2015-5693	94		Exec Code	2015-09-20	2016-12-22	7.9	None	Remote	Medium	???	Complete	Complete	Complete
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via vectors related to "traffic capture."
18	CVE-2015-5692	264		Exec Code	2015-09-20	2016-12-22	7.9	None	Remote	Medium	???	Complete	Complete	Complete
admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to make this a setuid-root file.
19	CVE-2015-1486	287		Bypass	2015-08-01	2017-09-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session.
20	CVE-2014-9226	264		Bypass	2015-01-21	2021-08-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.
21	CVE-2014-3437				2014-11-07	2018-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
22	CVE-2014-1649	264	1		2014-05-16	2014-07-24	7.9	None	Local Network	Medium	Not required	Complete	Complete	Complete
The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.
23	CVE-2014-1645	89		Exec Code Sql	2014-03-29	2014-03-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
24	CVE-2014-1644	255			2014-03-29	2014-03-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account.
25	CVE-2013-5017			Exec Code	2014-06-18	2017-12-28	7.9	None	Local Network	Medium	Not required	Complete	Complete	Complete
SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors.
26	CVE-2013-5014		2		2014-02-14	2014-03-26	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
27	CVE-2013-5011	22		+Priv Dir. Trav.	2014-01-10	2017-08-29	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.
28	CVE-2013-5009	287		+Priv	2014-01-10	2017-08-29	7.4	None	Local Network	Medium	???	Complete	Complete	Complete
The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.
29	CVE-2013-4575	119		DoS Exec Code Overflow	2013-08-05	2013-08-22	7.9	None	Local Network	Medium	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the utility program in the Linux agent in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via unspecified vectors.
30	CVE-2013-1612	119		Exec Code Overflow	2013-06-20	2013-06-20	7.9	None	Local Network	Medium	Not required	Complete	Complete	Complete
Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.
31	CVE-2012-4350			+Priv	2012-12-18	2013-03-14	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors.
32	CVE-2012-4349			+Priv	2012-12-11	2013-10-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors.
33	CVE-2012-4348	20		Exec Code	2012-12-18	2013-03-14	7.2	None	Local Network	Low	???	Complete	Complete	Complete
The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
34	CVE-2012-4178	89	1	Exec Code Sql	2012-08-07	2017-08-29	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.
35	CVE-2012-3580				2012-08-29	2017-08-29	7.7	None	Local Network	Low	???	Complete	Complete	Complete
Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface.
36	CVE-2012-3579	264			2012-08-29	2017-08-29	7.9	None	Local Network	Medium	Not required	Complete	Complete	Complete
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
37	CVE-2012-2961	89		Exec Code Sql	2012-07-23	2017-12-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
38	CVE-2012-2957	264		+Priv File Inclusion	2012-07-23	2017-12-22	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue.
39	CVE-2012-2574	89		Exec Code Sql	2012-07-23	2017-12-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" issue.
40	CVE-2012-0289	119		DoS Overflow +Priv	2012-05-23	2012-10-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script.
41	CVE-2011-0554	94		Exec Code	2011-10-02	2013-02-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."
42	CVE-2011-0553	89		Exec Code Sql	2011-10-02	2013-02-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
43	CVE-2011-0549	89		Exec Code Sql	2011-07-11	2017-08-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter.
44	CVE-2010-0114	20		Exec Code Bypass	2010-12-22	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request.
45	CVE-2010-0112	89		Exec Code Sql	2010-10-28	2017-08-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via (1) the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and SQL statements contained within a certain report file; (2) unspecified parameters in a DetailReportGroup (aka DetailReportGroup.lgx) action to rdpageimlogic.aspx; the (3) selclause, (4) whereTrendTimeClause, (5) TrendTypeForReport, (6) whereProtocolClause, or (7) groupClause parameter in a SummaryReportGroup (aka SummaryReportGroup.lgx) action to rdpageimlogic.aspx; the (8) loginTimeStamp, (9) dbo, (10) dateDiffParam, or (11) whereClause parameter in a LoggedInUsers (aka LoggedInUSers.lgx) action to (a) rdpageimlogic.aspx or (b) rdPage.aspx; the (12) selclause, (13) whereTrendTimeClause, (14) TrendTypeForReport, (15) whereProtocolClause, or (16) groupClause parameter to rdpageimlogic.aspx; (17) the groupList parameter to IMAdminReportTrendFormRun.asp; or (18) the email parameter to IMAdminScheduleReport.asp.
46	CVE-2010-0110	119		Exec Code Overflow	2011-01-31	2017-08-17	7.9	None	Local Network	Medium	Not required	Complete	Complete	Complete
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.
47	CVE-2009-3178			DoS	2009-09-11	2009-09-14	7.8	None	Remote	Low	Not required	None	None	Complete
Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, "Symantec Altiris Deployment Solution 6.9 DoS." NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
48	CVE-2009-3108	264		+Priv	2009-09-08	2013-02-07	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.
49	CVE-2008-2291	255			2008-05-18	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
50	CVE-2008-2290	264		+Priv	2008-05-18	2017-08-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

Total number of vulnerabilities : 108 Page : 1 (This Page)2 3