5337 matches found
Symantec Identity Manager 授权问题漏洞
Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager version 14.4, which originates from an unauthenticated user being able to access a specific page URL in the management console, but the system does no...
Symantec Identity Manager 代码问题漏洞
Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager version 14.4, which originates from an authenticated user being able to perform XML external entity injection in the management console...
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
CVE-2022-25627
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4...
CVE-2022-25627
Symantec Identity Manager 14.4 is affected: an authenticated administrator with physical access can perform Remote Command Execution on the Management Console. The publicly documented details describe local access as the attack vector with high impact on confidentiality, integrity, and availabili...
CVE-2022-25627
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4...
The vulnerability of Symantec Endpoint Protection’s antivirus software lies in its ability to bypass security elements, allowing attackers to circumvent password protection for security policy import/export.
The vulnerability of the Symantec Endpoint Protection antivirus software is related to the possibility of bypassing security elements. Exploiting this vulnerability could allow a hacker to circumvent password protection for security policy import/export...
CVE-2022-37017
Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...
CVE-2022-37016
Symantec Endpoint Protection Windows agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...
CVE-2022-37017
Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...
CVE-2022-37016
Symantec Endpoint Protection Windows agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...
Privilege escalation
Symantec Endpoint Protection Windows agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...
CVE-2022-37016
Symantec Endpoint Protection Windows agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...
Symantec Endpoint Protection 安全漏洞
Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security features across physical and virtual systems. A security vulnerability exists in Symantec Endpoint Protection Windows versions prior to 14.3 RU6/14.3 RU5 Patch 1, which stems from...
CVE-2022-37016
CVE-2022-37016 affects Symantec Endpoint Protection (Windows) agent. The NVD entry describes a Privilege Escalation with HIGH impact (C/H/I/A all high), CVSSv3.1 base score 9.8, using NETWORK attack vector, LOW complexity, no privileges and no user interaction required. Connected records consiste...
Symantec Endpoint Protection 安全漏洞
Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A security vulnerability exists in Symantec Endpoint Protection Windows that stems from vulnerability to an elevation of privilege vulnerabilit...
CVE-2022-37017
Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...
CVE-2022-37016
Symantec Endpoint Protection Windows agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...
CVE-2022-37017
Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...