5333 matches found
Symantec Endpoint Protection 安全漏洞
Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A security vulnerability exists in versions prior to Symantec Endpoint Protection 14.3 RU6 14.3.9210.6000, which stems from the presence of an...
CVE-2022-25631
Symantec Endpoint Protection, prior to 14.3 RU6 14.3.9210.6000, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated...
CVE-2022-25631
CVE-2022-25631 affects Symantec Endpoint Protection (SEP) Client/Endpoint Protection before 14.3 RU6 (14.3.9210.6000). The vulnerability is described as a local elevation of privilege, arising from insufficient access control that could allow a privileged attacker to compromise the SEP client. Pu...
CVE-2022-25631
Symantec Endpoint Protection, prior to 14.3 RU6 14.3.9210.6000, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated...
The vulnerability of Symantec Endpoint Protection’s antivirus software for Windows operating systems stems from deficiencies in access control, allowing attackers to escalate their privileges.
The vulnerability of the Symantec Endpoint Protection antivirus software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Bluebottle Cybercrime Group Preys on Financial Sector in French-Speaking African Nations
A cybercrime group dubbed Bluebottle has been linked to a set of targeted attacks against the financial sector in Francophone countries located in Africa from at least July 2022 to September 2022. "The group makes extensive use of living-off-the-land, dual use tools, and commodity malware, with n...
Symantec Messaging Gateway < 10.8 XSS (21115)
According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is prior to 10.8. It is, therefore, affected by a cross-site scripting vulnerability where an authenticated user who has the privilege to add/edit annotations on the Content tab can craft ...
Symantec Endpoint Protection Manager < 14.3 RU5 Security Control Bypass (deprecated)
This plugin has been deprecated. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2009/04/02. Deprecated by symantecendpointprotclient143RU5P1.nasl. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid169425; scriptversion"1.3";...
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
CVE-2022-25627
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4...
CVE-2022-25627
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4...
Command injection
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4...
CVE-2022-25628
CVE-2022-25628 describes an XML External Entity (XXE) injection vulnerability in the Symantec Identity Manager 14.4 Management Console . An authenticated user can trigger XXE, with potential data exposure or other malicious activity as implied by the vulnerability class. The CVSS data from the en...
PT-2022-17420 · Symantec · Symantec Identity Manager
Name of the Vulnerable Software and Affected Versions: Symantec Identity Manager version 14.4 Description: An authenticated user can perform XML eXternal Entity injection in the Management Console. This issue allows for potential data exposure or other malicious activities. Recommendations: For...
Symantec Identity Manager 授权问题漏洞
Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager version 14.4, which originates from an unauthenticated user being able to access a specific page URL in the management console, but the system does no...
Symantec Identity Manager 代码问题漏洞
Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager version 14.4, which originates from an authenticated user being able to perform XML external entity injection in the management console...
PT-2022-17419 · Symantec · Symantec Identity Manager
Name of the Vulnerable Software and Affected Versions: Symantec Identity Manager version 14.4 Description: An authenticated administrator with physical access to the environment can execute remote commands on the Management Console. This issue affects the Management Console component...