Lucene search
HistorySep 20, 2015 - 8:59 p.m.
CVE-2014-9229
cve-2014-9229
sql injection
symantec endpoint protection
sep
remote code execution
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow remote authenticated users to execute arbitrary SQL commands by leveraging the Limited Administrator role.
Affected configurations
Node
symantecendpoint_protectionRange≤12.1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| symantec:endpoint_protection | symantec endpoint protection | le | 12.1.5 |
Related
cvelist
cvelist
CVE-2014-9229
2015-09-20 20:00:00
prion
prion
Sql injection
2015-09-20 20:59:00
nvd
nvd
CVE-2014-9229
2015-09-20 20:59:02
nessus
nessus
symantec
symantec
Symantec Endpoint Protection Manager and Client Issues
2015-06-17 08:00:00
openvas
openvas
Symantec Endpoint Protection Multiple Vulnerabilities (Oct 2015)
2015-10-09 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
Related for CVE-2014-9229