Xxe

The management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external enti...

Sql injection

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQ...

CVE-2013-5014

CVE-2013-5014 is an XXE vulnerability in the Symantec Endpoint Protection Manager (SEPM) management console. The flaw lets remote attackers read arbitrary files by sending XML data containing an external entity declaration. Affected are SEPM versions: 11.0 before 11.0.7405.1424 and 12.1 before 12...

CVE-2013-5015

CVE-2013-5015 affects Symantec Endpoint Protection Manager (SEPM) and related components. The vulnerability is a SQL injection in the management console that, when exploited by remote authenticated users, can cause arbitrary SQL commands to be executed. Affected versions in the initial data inclu...

CVE-2013-5015

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQ...

CVE-2013-5014

The management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external enti...

Symantec Encryption Server Detection

Binary data symantecencryptionserverdetect.nbin...

Symantec Encryption Management Server < 3.3.2 Information Disclosure

The version of Symantec Encryption Management Server listening on the remote host is earlier than version 3.3.2. It is, therefore, affected by an information disclosure vulnerability due to a flaw in the Web Email Protection component. A remote, authenticated attacker could potentially exploit th...

Symantec Endpoint Protection Manager XML外部实体注入漏洞

BUGTRAQ ID: 65466 CVECAN ID: CVE-2013-5014 Symantec Endpoint Protection SEP是由Symantec Corporation开发的新一代反病毒和防火墙产品。 Symantec Endpoint Protection Manager 11.0、Symantec Endpoint Protection Center Small Business Edition 12.0、Symantec Endpoint Protection Manager...

Symantec Endpoint Protection Manager Vulnerabilities

SUMMARY The management console for Symantec Endpoint Protection Manager does not properly handle external XML data, which could potentially allow unauthorized access to restricted server-side data and console management functionality. The management console for Symantec Endpoint Protection Manage...

Symantec Web Gateway <= 5.1.1 Multiple Vulnerabilities (SYM14-003)

According to its self-reported version number, the remote web server is hosting a version of Symantec Web Gateway 5.1.1 or earlier. It is, therefore, affected by the following vulnerabilities : - Multiple SQL injection vulnerabilities exist because of a failure to sanitize user-supplied data befo...

CVE-2013-5013

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...

CVE-2013-5012

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...

CVE-2013-5012

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5012

Symantec Web Gateway (SWG) appliance prior to version 5.2 is affected by SQL injection vulnerabilities in the management console, allowing remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This CVE (CVE-2013-5012) is part of a set of vulnerabilities affecting S...

CVE-2013-5013

Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...

CVE-2013-5013

Symantec Web Gateway (SWG) management console contains cross‑site scripting (XSS) vulnerabilities tracked as CVE‑2013‑5013. Public sources indicate SWG

Symantec Web Gateway 5.1.1.24 Cross Site Scripting

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities in Symantec WEB Gateway 5.1.1.24 II. BACKGROUND ------------------------- Symantec Corporation is an American computer security, backup and availability solutions software corporation headquartered in Mountain View,...