symantec Vulnerability Advisory Catalog

Total 518 security vulnerabilities recorded for symantec software and firmware.

← Back to All Vendors
Component: messaging_gateway

The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious...

📅 2017-06-26
CVSS 7.3 Dossier →
Component: content_analysis

The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site re...

📅 2017-05-11
CVSS 8.8 Dossier →
CVE-2016-5312 MEDIUM
Component: messaging_gateway

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbi...

📅 2017-04-14
CVSS 6.5 Dossier →
Component: web_gateway

Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands....

📅 2017-04-12
CVSS 8.8 Dossier →
CVE-2016-5308 MEDIUM
Component: client_intrusion_detection_system

The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1.2 in Norton Security allows re...

📅 2016-07-12
CVSS 5.5 Dossier →
CVE-2016-2206 MEDIUM
Component: workspace_streaming

The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (...

📅 2016-07-12
CVSS 5.7 Dossier →
CVE-2016-2205 MEDIUM
Component: workspace_streaming

Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.5.x before...

📅 2016-07-12
CVSS 5.7 Dossier →
CVE-2016-5307 MEDIUM
Component: endpoint_protection_manager

Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitra...

📅 2016-06-30
CVSS 4.3 Dossier →
CVE-2016-5306 MEDIUM
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for r...

📅 2016-06-30
CVSS 5.3 Dossier →
CVE-2016-5305 MEDIUM
Component: endpoint_protection_manager

Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow rem...

📅 2016-06-30
CVSS 5.4 Dossier →
CVE-2016-5304 MEDIUM
Component: endpoint_protection_manager

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticat...

📅 2016-06-30
CVSS 6.8 Dossier →
Component: endpoint_protection_manager

Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 al...

📅 2016-06-30
CVSS 8.0 Dossier →
CVE-2016-3652 MEDIUM
Component: endpoint_protection_manager

Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow rem...

📅 2016-06-30
CVSS 5.4 Dossier →
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified...

📅 2016-06-30
CVSS 8.0 Dossier →
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack....

📅 2016-06-30
CVSS 8.8 Dossier →
CVE-2016-3649 MEDIUM
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via mod...

📅 2016-06-30
CVSS 4.3 Dossier →
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechani...

📅 2016-06-30
CVSS 8.8 Dossier →
Component: endpoint_protection_manager

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attack...

📅 2016-06-30
CVSS 7.7 Dossier →
Component: norton_security

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syman...

📅 2016-06-30
CVSS 8.4 Dossier →
CVE-2016-3645 CRITICAL
Component: norton_security

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:S...

📅 2016-06-30
CVSS 9.8 Dossier →
Component: norton_security

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syman...

📅 2016-06-30
CVSS 8.4 Dossier →
Component: mail_security_for_microsoft_exchange

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Syman...

📅 2016-06-30
CVSS 7.8 Dossier →
Component: mail_security_for_microsoft_exchange

Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (...

📅 2016-06-30
CVSS 7.3 Dossier →
Component: mail_security_for_microsoft_exchange

Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (S...

📅 2016-06-30
CVSS 7.3 Dossier →
Page 6 of 22 (518 Total Records)