5333 matches found
CVE-2020-5838
Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users...
CVE-2020-5838
Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users...
Cross site scripting
Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users...
CVE-2020-5838
Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting XSS exploit, which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users...
CVE-2020-5838
Symantec IT Analytics is affected by CVE-2020-5838: prior to version 2.9.1, it may be susceptible to a cross-site scripting (XSS) vulnerability enabling attacker-injected client-side scripts in pages viewed by other users. Remediation per the connected docs is to upgrade to 2.9.1; no explicit exp...
IT Analytics XSS
Summary Symantec has released an update to address an issue that was discovered in the IT Analytics product. Affected Products IT Analytics --- CVE | Affected Versions | Remediation CVE-2020-5838 | Prior to 2.9.1 | Upgrade to 2.9.1 Issue Details CVE-2020-5838 --- Severity/CVSSv3: | Medium / 4.3...
Apache Tomcat Vulnerabilities Oct 2018 – Feb 2020
Summary Symantec SWG products using affected versions of Apache Tomcat may be susceptible to multiple vulnerabilities. A remote attacker can execute arbitrary code on the target host, hijack an authenticated Tomcat user's session, redirect a Tomcat user to an arbitrary URL, execute arbitrary...
Symantec Endpoint Protection Elevation of Privilege Vulnerability (CNVD-2020-28257)
Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A security vulnerability exists in versions of Symantec SEP prior to 14.3. An attacker can exploit the vulnerability to reset the ACL of a file...
Symantec Endpoint Protection Backlink Vulnerability
Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A security vulnerability exists in Symantec SEP prior to version 14.3, which arises from the program failing to properly enforce security...
Symantec Endpoint Protection Manager Path Traversal Vulnerability
Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A path traversal vulnerability exists in Symantec SEPM versions prior to 14.3. A remote...
CVE-2020-5833
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...
CVE-2020-5835
Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...
CVE-2020-5836
Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled...
CVE-2020-5833
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...
CVE-2020-5834
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...
CVE-2020-5834
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...
CVE-2020-5837
Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...
CVE-2020-5837
Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...
CVE-2020-5837
Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...