CVE-2013-5014

CVE-2013-5014 is an XXE vulnerability in the Symantec Endpoint Protection Manager (SEPM) management console. The flaw lets remote attackers read arbitrary files by sending XML data containing an external entity declaration. Affected are SEPM versions: 11.0 before 11.0.7405.1424 and 12.1 before 12...

CVE-2013-5015

CVE-2013-5015 affects Symantec Endpoint Protection Manager (SEPM) and related components. The vulnerability is a SQL injection in the management console that, when exploited by remote authenticated users, can cause arbitrary SQL commands to be executed. Affected versions in the initial data inclu...