CVE-2016-3645: Undefined Security Weakness

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Ma...

CVE-2016-2207: Improper Input Validation

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

CVE-2016-5306: Exposure of Sensitive Information to an Unauthorized Actor

Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445...

PT-2016-6358

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in management scripts. These vulnerabilities allow remote authenticated users to inject...

CVE-2016-5304: Undefined Security Weakness

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2016-6360

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 before RU6 MP5 Description A directory traversal issue allows remote authenticated users to read arbitrary files in the web-root directory tree. Recommendations For Symantec Endpoint...

Symantec Endpoint Protection 12.1 CSRF / XSS / Open Redirect

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-SEPM-MULTIPLE-VULNS.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =========== SEPM Symantec Endpoint Protection Manager and client v12.1...

Symantec Endpoint Protection Manager and Client Information Disclosure Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. The software provides security across physical and virtual systems.SEP Manager and Client are the management and client software. An information disclosure vulnerability exists in the management console o...

PT-2016-2308

Name of the Vulnerable Software and Affected Versions Symantec Advanced Threat Protection ATP Symantec Data Center Security:Server SDCS:S versions 6.x through 6.6 MP1 Symantec Web Gateway Symantec Endpoint Protection SEP versions prior to 12.1 RU6 MP5 Symantec Endpoint Protection SEP for Mac...

PT-2016-2315

Name of the Vulnerable Software and Affected Versions Symantec Advanced Threat Protection ATP Symantec Data Center Security:Server SDCS:S versions 6.x through 6.6 MP1 Symantec Web Gateway Symantec Endpoint Protection SEP versions prior to 12.1 RU6 MP5 Symantec Endpoint Protection SEP for Mac...

PT-2016-2313

Name of the Vulnerable Software and Affected Versions Symantec Advanced Threat Protection ATP versions 6.x through 6.6 MP1 Symantec Data Center Security:Server SDCS:S versions 6.x through 6.6 MP1 Symantec Web Gateway affected versions not specified Symantec Endpoint Protection SEP versions prior ...

PT-2016-2307

Name of the Vulnerable Software and Affected Versions Symantec Advanced Threat Protection ATP versions 6.x through 6.6 MP1 Symantec Data Center Security:Server SDCS:S versions 6.x through 6.6 MP1 Symantec Web Gateway affected versions not specified Symantec Endpoint Protection SEP versions prior ...

PT-2016-5633

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 12.1 before RU6 MP5 Description The issue allows remote authenticated users to conduct server-side request forgery SSRF attacks. This enables triggering network traffic to arbitrary intranet hosts...

PT-2016-5634

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue allows remote authenticated users to bypass the Authentication Lock protection mechanism. This enables them to conduct brute-force password-guessing...

PT-2016-4031

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection version 12.1 before RU6 MP5 Description A race condition in the client allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the device manager recognize...

PT-2016-5635

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 12.1 through 12.1 before RU6 MP5 Description The issue allows remote authenticated administrators to enumerate administrator accounts by sending modified GET requests. This could potentially be use...

PT-2016-5636

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue allows remote authenticated users to discover credentials via a brute-force attack. There is no information provided about the estimated number of...

PT-2016-5638

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in management scripts. These vulnerabilities allow remote authenticated users to inject...

CVE-2016-3652: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in management scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-5639

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU6 MP5 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in management scripts. These vulnerabilities allow remote authenticated users to hijack...