Symantec Critical System Protection Security Vulnerabilities and Issues — Symantec Critical System Protection CVE List

Lucene search

BroadcomSymantec Critical System Protection

11 matches found

CVE•added 2015/01/21 3:17 p.m.•63 views

CVE-2014-9226

The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.

7.2CVSS7.9AI score0.01331EPSS

CVE•added 2015/01/21 3:17 p.m.•52 views

CVE-2014-7289

SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.

6.5CVSS8.6AI score0.00876EPSS

CVE•added 2015/01/21 3:17 p.m.•48 views

CVE-2014-9225

The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.

4CVSS7.7AI score0.10119EPSS

CVE•added 2016/06/08 2:59 p.m.•48 views

CVE-2015-8800

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x ...

7.3CVSS7.6AI score0.00547EPSS

CVE•added 2016/06/08 2:59 p.m.•46 views

CVE-2015-8798

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 M...

8CVSS8.2AI score0.04915EPSS

CVE•added 2016/06/08 2:59 p.m.•46 views

CVE-2015-8799

7.6CVSS7.7AI score0.04499EPSS

CVE•added 2015/01/21 3:17 p.m.•45 views

CVE-2014-9224

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated us...

3.5CVSS6.5AI score0.03985EPSS

CVE•added 2015/01/21 3:17 p.m.•43 views

CVE-2014-3440

The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to...

9CVSS8.6AI score0.00944EPSS

CVE•added 2016/06/08 2:59 p.m.•42 views

CVE-2015-8157

SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Da...

8.8CVSS8.7AI score0.0047EPSS

CVE•added 2019/11/25 5:15 p.m.•36 views

CVE-2019-18374

Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authentication controls.

9.8CVSS9.4AI score0.00536EPSS

CVE•added 2014/05/08 10:55 a.m.•33 views

CVE-2013-5016

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

7.6CVSS6.8AI score0.01379EPSS