Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting

SUMMARY Symantec Endpoint Protection Manager 12.1 web console is susceptible to cross-site scripting and cross-site request forgery that could potentially lead to arbitrary code execution. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Endpoint Protection | 12.1 ...

CVE-2011-0551

Symantec Endpoint Protection Manager Web Console is affected by CSRF (CVE-2011-0551) in SEP 11.0 RU6 up to 11.0.6300, enabling an unauthenticated/remote actor to hijack an administrator’s session to create new admin accounts. OpenVAS entries and Symantec advisories also note XSS/CSRF issues in SE...