PT-2020-18739

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.2 RU2 MP1 Description The issue is related to an out of bounds vulnerability, which occurs when an application reads memory outside of the allocated bounds, potentially leading to...

CVE-2020-5827: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

PT-2020-18740

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.2 RU2 MP1 Description The issue is related to an out of bounds vulnerability, which occurs when an application reads memory outside of the allocated bounds, potentially leading to...

CVE-2020-5830: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5831: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5828: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5829: Out-of-bounds Read

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2019-12759

Symantec Endpoint Protection Manager SEPM and Symantec Mail Security for MS Exchange SMSMSE, prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software applicati...

Privilege escalation

Symantec Endpoint Protection Manager SEPM and Symantec Mail Security for MS Exchange SMSMSE, prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software applicati...

CVE-2019-12759

CVE-2019-12759 affects Symantec Endpoint Protection Manager (SEPM) and Symantec Mail Security for Exchange (SMSMSE) prior to SEPM 14.2 RU2 and SMSMSE 7.5.x, introducing a privilege-escalation flaw. Technical details point to the LuComServer stDisScriptEngine class as the root cause, enabling loca...

CVE-2018-18368

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an...

CVE-2018-18368

Symantec Endpoint Protection Manager (SEPM) is affected by a local privilege escalation vulnerability (CVE-2018-18368) that exists in SEPM prior to 14.2 RU1. An attacker with local access could gain elevated privileges. Remediation is to upgrade to SEPM/SEP 14.2 RU1 (or RU2 where applicable) and ...

PT-2019-9584

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions prior to 14.2 RU1 Description The issue is related to a privilege escalation problem, where an attacker may try to compromise the software to gain elevated access to protected resources...

CVE-2019-12759: Undefined Security Weakness

Symantec Endpoint Protection Manager SEPM and Symantec Mail Security for MS Exchange SMSMSE, prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software applicati...

CVE-2018-18368: Improper Privilege Management

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an...

Symantec Endpoint Protection Manager OpenSSL Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Symantec Endpoint Protection Manager CVE-2018-18368 Local Privilege Escalation Vulnerability

Description Symantec Endpoint Protection Manager is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Symantec Endpoint Protection Manager versions prior to 14.2 RU1 are vulnerable. Technologies Affected Symantec Endpoint...

Multiple Symantec Products CVE-2019-12759 Local Privilege Escalation Vulnerability

Description Multiple Symantec Products are prone to an local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. The following products and versions are affected: Symantec Endpoint Protection Manager SEPM prior to versions 14.2 RU2 Symantec Ma...

PT-2019-12927

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.2 RU2 Symantec Mail Security for MS Exchange versions prior to 7.5.x Description The issue is related to a privilege escalation problem, where an attacker may try to compromise the...

CVE-2018-18367

Symantec Endpoint Protection Manager SEPM prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use...