Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting

SUMMARY Symantec Endpoint Protection Manager 12.1 web console is susceptible to cross-site scripting and cross-site request forgery that could potentially lead to arbitrary code execution. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Endpoint Protection | 12.1 ...

CVE-2011-0550

Symantec Endpoint Protection Manager (SEP) Web Interface (SEP 11.0 RU6/11.0 RU6-based) is affected by cross-site scripting (XSS) in the Web UI, specifically via the token parameter in portal/Help.jsp or via the URI in console/apps/sepm. Multiple OpenVAS/Nessus entries corroborate XSS; Nessus addi...