Symantec » Endpoint Protection : Security Vulnerabilities, CVEs, Published In 2015
Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492.
Max CVSS
7.2
EPSS Score
0.04%
Published
2015-11-12
Updated
2015-11-19
Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow remote authenticated users to execute arbitrary SQL commands by leveraging the Limited Administrator role.
Max CVSS
6.5
EPSS Score
0.12%
Published
2015-09-20
Updated
2017-09-23
sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a denial of service (blocked system shutdown) by triggering an unspecified deadlock condition.
Max CVSS
4.9
EPSS Score
0.04%
Published
2015-09-20
Updated
2017-09-23
Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Max CVSS
4.4
EPSS Score
0.06%
Published
2015-09-20
Updated
2017-09-23
4 vulnerabilities found