465 matches found
CVE-2012-4612
CVE-2012-4612 is an XSS vulnerability in RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x prior to 3.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the primary sources, affected products include RSA DPM Ap...
PT-2012-5517
Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance versions 2.7.x through 3.x before 3.2.1 Description The issue allows local users to bypass intended access restrictions via a brute-force attack because the software does not properly restrict the numb...
CVE-2012-4613
EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypass intended access restrictions via a brute-force attack...
PT-2012-5516
Name of the Vulnerable Software and Affected Versions EMC RSA Data Protection Manager Appliance and Software Server versions 2.7.x through 3.2.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For...
ESA-2012-055: RSA® Data Protection Manager Multiple Vulnerabilities
ESA-2012-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-055: RSA® Data Protection Manager Multiple Vulnerabilities EMC Identifier: ESA-2012-055 CVE Identifier: CVE-2012-4612, CVE-2012-4613 Severity Rating: See below for individual scores and refer vendor advisories for component...
Symantec Endpoint Protection Manager Installed (credentialed check)
Symantec Endpoint Protection Manager, an endpoint security solution, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59365; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...
Symantec Endpoint Protection Manager < 12.1 RU1 MP1 (SYM12-008) (credentialed check)
The version of Symantec Endpoint Protection Manager installed on the remote host is less than 12.1 RU1 MP1 12.1.1101 and has the following vulnerabilities : - An arbitrary file deletion issue exists via directory traversal attacks. CVE-2012-0294 - A file inclusion vulnerability exists that could...
Symantec Endpoint Protection Manager TestConnection.jsp 'Msg' Parameter XSS (SYM11-009 & SYM12-001)
The version of Symantec Endpoint Protection Manager running on the remote web server is affected by a cross-site scripting XSS vulnerability due to improper sanitization of input to the 'Msg' parameter in the TestConnection.jsp file. An unauthenticated, remote attacker can exploit this...
Symantec Endpoint Protection Manager XSS and CSRF Vulnerabilities
Symantec Endpoint Protection Manager is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2011-0550
Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...
CVE-2011-0551
Cross-site request forgery CSRF vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...
CVE-2011-0551
Cross-site request forgery CSRF vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...
CVE-2011-0550
Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...
CVE-2011-0551: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...
CVE-2011-0550: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...
Description of the hotfix rollup package for System Center Data Protection Manager 2010: November 10, 2010
None None...
CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus SAV Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security SCS before 3.1 MR8, and the Symantec Endpoint Protection Manager SEPM component in Symantec Endpoint Protection SEP before 11.0 MR2, allows remote...
CVE-2009-1432: Improper Input Validation
Symantec Reporting Server, as used in Symantec AntiVirus SAV Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security SCS before 3.1 MR8, and the Symantec Endpoint Protection Manager SEPM component in Symantec Endpoint Protection SEP before 11.0 MR2, allows remote...
