CVE-2017-15527

The CVE-2017-15527 entry concerns the Symantec Management Console. Affected product: Symantec Management Console (ITMS) prior to 8.1 RU4. Vulnerable component/behavior: directory traversal due to insufficient input validation/sanitization of user-supplied file names, allowing traversal sequences ...

CVE-2017-6323

CVE-2017-6323 affects Symantec Management Console versions prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6 and ITMS 7.6_POST_HF7. Root cause is processing XML input with a reference to an external entity by a weakly configured XML parser (XXE). Potential impact includes disclosure of confidential data, ...