Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9225
HistoryJan 21, 2015 - 3:17 p.m.

CVE-2014-9225

2015-01-2115:17:06
CWE-200
[email protected]
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.9%

JSON

The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.

Affected configurations

NVD
Node
broadcomsymantec_critical_system_protectionMatch5.2.9
Node
symantecdata_center_securityMatch6.0.0server_advanced

Related

cve 1
prion 1
cvelist 1
nessus 2
exploitpack 1
zdt 1
securityvulns 2
packetstorm 1
symantec 1
exploitdb 1
cve
cve
CVE-2014-9225
2015-01-21 15:17:06
prion
prion
Code injection
2015-01-21 15:17:00
cvelist
cvelist
CVE-2014-9225
2015-01-21 11:00:00
nessus
nessus
Symantec Data Center Security Server 'environment.jsp' Information Disclosure (SYM15-001)
2015-02-26 00:00:00
Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)
2015-01-22 00:00:00
exploitpack
exploitpack
Symantec Data Center Security - Multiple Vulnerabilities
2015-01-26 00:00:00
zdt
zdt
Symantec Data Center Security - Multiple Vulnerabilities
2015-01-22 00:00:00
securityvulns
securityvulns
Symantec Data Center Security: Server Advanced &#40;SDCS:SA&#41; &amp; SCSP security vulnerabilities
2015-01-25 00:00:00
SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced &#40;SDCS:SA&#41; &amp; SCSP
2015-01-25 00:00:00
packetstorm
packetstorm
Symantec SDCS:SA / SCSP XSS / Bypass / SQL Injection / Disclosure
2015-01-22 00:00:00
symantec
symantec
Symantec Data Center Security: Server Advanced, Multiple Security Issues on Management Server and Pr
2015-01-19 08:00:00
exploitdb
exploitdb
Symantec Data Center Security - Multiple Vulnerabilities
2015-01-26 00:00:00

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.9%

JSON
Related for NVD:CVE-2014-9225
cve1prion1cvelist1nessus2exploitpack1zdt1securityvulns2packetstorm1symantec1exploitdb1