CVE-2015-8798: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection SES:CSP 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices SES:CSP 6.5.0 before MP1, Critical System Protection SCSP before 5.2.9 MP6,...

PT-2016-3866

Name of the Vulnerable Software and Affected Versions Symantec Embedded Security: Critical System Protection SES:CSP versions 1.0.x through 1.0 before MP5 Embedded Security: Critical System Protection for Controllers and Devices SES:CSP version 6.5.0 before MP1 Critical System Protection SCSP...

Symantec Embedded Security: Critical System Protection and Symantec Data Center Security: Server Advanced Elevation of Privilege Vulnerabilities

Symantec Embedded Security:Critical System Protection SES:CSP and Symantec Data Center Security: Server Advanced SDCS:SA are both security products from Symantec Corporation. SES:CSP is a lightweight intrusion detection and prevention system client product; SDCS:SA provides security for physical...

Symantec Data Center Security - Multiple Vulnerabilities

Symantec Data Center Security: Server Advanced SDCS:SA and Symantec Critical System Protection SCSP suffer from cross site scripting, remote SQL injection, information disclosure, and policy bypass vulnerabilities. ======================================================================= title:...

CVE-2014-7289: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...

CVE-2014-9224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows remote authenticated users ...

CVE-2014-9226: Undefined Security Weakness

The management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors...

PT-2015-3924

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 before MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x before 6.0 MP1 Description A SQL injection issue exists in the management server, allowing remote...

PT-2015-4164

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 through 5.2.9 MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x through 6.0 MP1 Description The issue allows remote authenticated users to obtain sensitive server...

PT-2015-4163

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 through MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x through 6.0 MP1 Description A cross-site scripting XSS issue exists in the ajaxswing webui component of t...

CVE-2014-9225: Exposure of Sensitive Information to an Unauthorized Actor

The ajaxswing webui in the management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors...

PT-2015-3723

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection versions 5.2.9 before MP6 Symantec Data Center Security: Server Advanced versions 6.0.x before 6.0 MP1 Description The issue allows remote authenticated users to execute arbitrary commands by leveraging...

CVE-2014-3440: Improper Input Validation

The Agent Control Interface in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to...