CVE-2014-9225: Exposure of Sensitive Information to an Unauthorized Actor

The ajaxswing webui in the management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors...

CVE-2014-9226: Undefined Security Weakness

The management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors...

PT-2015-3924

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 before MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x before 6.0 MP1 Description A SQL injection issue exists in the management server, allowing remote...

PT-2015-4164

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 through 5.2.9 MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x through 6.0 MP1 Description The issue allows remote authenticated users to obtain sensitive server...

PT-2015-4163

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection SCSP versions 5.2.9 through MP6 Symantec Data Center Security: Server Advanced SDCS:SA versions 6.0.x through 6.0 MP1 Description A cross-site scripting XSS issue exists in the ajaxswing webui component of t...

CVE-2014-9224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection SCSP 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x through 6.0 MP1 allows remote authenticated users ...

CVE-2014-7289: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...

PT-2015-3723

Name of the Vulnerable Software and Affected Versions Symantec Critical System Protection versions 5.2.9 before MP6 Symantec Data Center Security: Server Advanced versions 6.0.x before 6.0 MP1 Description The issue allows remote authenticated users to execute arbitrary commands by leveraging...

CVE-2014-3440: Improper Input Validation

The Agent Control Interface in the management server in Symantec Critical System Protection SCSP 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced SDCS:SA 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to...

Multiple Symantec Products Cross-Site Scripting Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. A cross-site scripting...

Multiple Symantec Product Information Disclosure Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. An information disclosure...

Multiple Symantec Product Local Security Bypass Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. Multiple Symantec products...

Multiple Symantec Product SQL Injection Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. A SQL injection...