26 matches found
CVE-2019-18374
Symantec Critical System Protection CSP, versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls...
EUVD-2014-9051
Malware in sbrugna...
EUVD-2014-9049
Malware in sbrugna...
EUVD-2019-8159
Malware in sbrugna...
EUVD-2014-3452
Malware in sbrugna...
EUVD-2013-4858
Malware in sbrugna...
Symantec Critical System Protection 8.0 < 8.0 MP2 Authentication Bypass (SYMSA1498)
The version of Symantec Critical System Protection SCSP installed on the remote Windows host is 8.0 prior to 8.0 MP2. It is, therefore, affected by an unspecified authentication bypass vulnerability. C Tenable Network Security, Inc, include"compat.inc"; if description scriptid131765;...
Symantec Critical System Protection CVE-2019-18374 Unspecified Authentication Bypass Vulnerability
Description Symantec Critical System Protection is prone to an unspecified authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks. Symantec Critical System Protection CSP...
PT-2019-15382
Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection CSP versions 8.0 through 8.0 MP1 Description The issue is related to an authentication bypass, which can potentially allow a threat actor to circumvent existing authentication controls. Recommendations For...
CVE-2019-18374: Improper Authentication
Symantec Critical System Protection CSP, versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls...
Cross site scripting
Cross-site scripting XSS vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows remote authenticated users ...
Design/Logic Flaw
The Agent Control Interface in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to...
PT-2015-4165
Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection versions 5.2.9 through MP6 Symantec Data Center Security: Server Advanced versions 6.0.x through 6.0 MP1 Description The issue allows local users to bypass intended Protection Policies via unspecified vector...
PT-2015-3924
Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 before MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x before 6.0 MP1 Description A SQL injection issue exists in the management server, allowing remote...
PT-2015-4164
Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 through 5.2.9 MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x through 6.0 MP1 Description The issue allows remote authenticated users to obtain sensitive server...
PT-2015-4163
Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 through MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x through 6.0 MP1 Description A cross-site scripting XSS issue exists in the ajaxswing webui component of t...
CVE-2014-9224: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows remote authenticated users ...
CVE-2014-7289: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...
PT-2015-3723
Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection versions 5.2.9 before MP6 Symantec Data Center Security: Server Advanced versions 6.0.x before 6.0 MP1 Description The issue allows remote authenticated users to execute arbitrary commands by leveraging...
CVE-2014-3440: Improper Input Validation
The Agent Control Interface in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to...