Symantec الثغرات

التسلسل الزمني

النوع

منتج

Symantec Endpoint Protection68
Symantec Web Gateway37
Symantec Endpoint Protection Manager34
Symantec Norton Antivirus26
Symantec Messaging Gateway22

معالجة

Official Fix477
Temporary Fix0
Workaround13
Unavailable8
Not Defined119

قابلية الاستغلال

High50
Functional1
Proof-of-Concept248
Unproven35
Not Defined283

متجه الوصول

Not Defined0
Physical1
Local151
Adjacent59
Network406

توثيق

Not Defined0
High26
Low177
None414

تفاعل المستخدم

Not Defined0
Required82
None535

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤442
≤560
≤6155
≤780
≤8149
≤961
≤1069

CVSSv3 Temp

≤10
≤20
≤34
≤455
≤595
≤6140
≤7126
≤8107
≤953
≤1037

VulDB

≤10
≤21
≤39
≤444
≤564
≤6164
≤760
≤8149
≤957
≤1069

NVD

≤10
≤20
≤32
≤48
≤512
≤631
≤727
≤858
≤915
≤1013

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤91
≤100

المجهز

≤10
≤20
≤33
≤48
≤59
≤69
≤717
≤811
≤91
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k1
<2k4
<5k49
<10k184
<25k267
<50k106
<100k5
≥100k1

إكسبلويت اليوم

<1k548
<2k10
<5k27
<10k24
<25k8
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (174): ASG (2), AV Engine (1), Advanced Secure Gateway (9), Altiris (1), Altiris Deployment Solution (19), Altiris IT Management Suite (1), Altiris Notification Server (6), Altiris WISE Package Studio (1), Anti-Virus Engine (1), AntiVirus (17), AntiVirus Corporate Edition (3), AntiVirus Scan Engine (1), Antivirus (2), Antivirus Scan Engine (5), AppStream (1), AppStream Client (1), Automated Support Assistant (3), Backup (2), Backup Exec (18), Backup Exec System Recovery (2), BackupExec System Recovery (1), Backupexec System Recovery (4), Brightmail AntiSpam (6), Brightmail Antispam (1), Brightmail Gateway (1), Brightmail Gateway Appliance (2), CacheFlow (1), Client Security (6), Clientless Vpn Gateway 4400 (1), Cluster Server (1), Compliance Server (2), Content Analysis Module (1), Critical System Protection (6), Data Center Security (9), Data Center Security Manager (1), Data Insight (2), Data Loss Prevention (4), Data Loss Prevention Detection Servers (1), Deployment Solution (1), Encryption Desktop (10), Encryption Management Server (9), Endpoint Detection (2), Endpoint Detection & Response (1), Endpoint Detection and Response Appliance (1), Endpoint Encryption (9), Endpoint Protection (68), Endpoint Protection AVEngine (2), Endpoint Protection Manager (34), Endpoint Protection SBE (1), Endpoint Protection Small Business Edition (15), Enterprise Firewall (14), Enterprise Security Manager (4), Enterprise Server (1), Enterprise Vault (1), Filter (1), Firewall (7), Gateway (4), Gateway Security (3), Gateway Security 5400 (1), Ghost (2), Ghost Solution Suite (1), Ghost Solutions Suite (3), I-gear (1), IM Manager (8), IT Analytics (1), ITMS (1), Industrial Control System Protection (1), Install Norton Security (1), IntelligenceCenter (1), Java! JIT Compiler (1), Layer7 API Management OAuth Toolkit (1), LiveUpdate (12), LiveUpdate Administrator (2), Livestate Agent (1), Mail-Gear (1), Mail Security (7), Mail Security Appliance (1), Mail Security for Domino (2), Mail Security for MS Exchange (1), Mail Security for Microsoft Exchange (2), Mail Threat Defense (1), Management Agent (2), Management Center (1), Management Console (2), Management Platform (1), Message Filter (4), Message Gateway (2), Messaging Gateway (22), Messaging Gateway SMG (2), Mobile Security (1), My VIP Portal (1), NetBackup (1), NetBackup Appliance (1), NetBackup OpsCenter Server (1), NetBackup PureDisk (1), NetBackup PureDisk Remote Office Edition (1), NetBackup Server (1), Network Access Control (2), Norton 360 (1), Norton Anti-Virus (1), Norton AntiVirus (13), Norton Antispam (1), Norton Antivirus (26), Norton Antivirus for Internet Email Gateway (1), Norton Core (1), Norton Ghost (9), Norton Internet Security (13), Norton Internet Security 2008 (1), Norton Internet Security 2010 (1), Norton Personal Firewall (8), Norton Security (3), Norton System Works (4), Norton Utilities (1), Norton_internet_security (2), ON Command CCM (1), On-Demand Agent (1), On Command Discovery (1), PGP (1), PGP Desktop (2), PGP Universal Server (1), PGP Whole Disk Encryption (1), PowerQuest DeployCenter (1), Products (1), ProxyClient (1), ProxySG (11), Raptor (1), Raptor Firewall (3), Reporter (1), Reporter CLI (1), Reporter Web UI (1), Response (2), SAV (1), SONAR (1), SSL Visibility (1), Security Analytics (2), Security Check Service (1), Security Check Virus Detection (1), SecurityExpressions Audit (2), Security Information Manager (4), Storage Foundation (1), Sygate Management Server (1), Sygate NAC (1), Sygate Personal Firewall (2), Symantec Antivirus Scan Engine (2), Symantec Endpoint Protection Cloud (2), System Recovery (1), System Works (1), VIP Access Desktop (1), VIP Access for Desktop (1), VIP Enterprise Gateway (1), VPN (2), VPN Appliance (2), VPN Appliances (2), Velociraptor (2), Veritas Backup (1), Veritas Backup Exec (2), Veritas Cluster Server (1), Veritas Command Central Storage Change Manager (1), Veritas File System (2), Veritas Netbackup (5), Veritas Netbackup Server (1), Veritas Storage Foundation (3), Veritas Volume Manager (1), Veritas Volume Replicator (1), Web Gateway (37), Web Isolation (1), Web Security (6), WinFax Pro (1), Workspace Streaming (4), Workspace Virtualization (3), i3 Focalpoint Server (1), iCommand (1), norton antivirus (2), pcAnywhere (21)

Link to Vendor Website: https://www.symantec.com/

منشورBaseTempالثغرةProdق�معالجةCTIEPSSCVE
21/01/20237.06.9Symantec Endpoint Protection تجاوز الصلاحياتAnti-Malware SoftwareNot DefinedOfficial Fix0.030.00043CVE-2022-25631
01/12/20226.56.4Symantec Endpoint Protection تجاوز الصلاحياتAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00048CVE-2022-37017
01/12/20227.67.6Symantec Endpoint Protection تجاوز الصلاحياتAnti-Malware SoftwareNot DefinedNot Defined0.000.00091CVE-2022-37016
09/11/20227.67.5Symantec Endpoint Detection and Response Appliance Privilege Escalationغير معروفNot DefinedOfficial Fix0.020.00092CVE-2022-37015
28/07/20227.37.3Symantec Veritas Netbackup توثيق ضعيفBackup SoftwareNot DefinedNot Defined0.030.00054CVE-2022-36956
07/07/20228.28.2Symantec Advanced Secure Gateway/ProxySG HTTP توثيق ضعيفFirewall SoftwareNot DefinedNot Defined0.000.00073CVE-2021-46825
05/03/20228.88.8Symantec Management Agent Registry تجاوز الصلاحياتغير معروفNot DefinedNot Defined0.030.00043CVE-2022-25623
18/02/20223.53.4Symantec Layer7 API Management OAuth Toolkit Web UI سكربتات مشتركةAutomation SoftwareNot DefinedOfficial Fix0.050.00086CVE-2021-30650
01/07/20216.36.3Symantec Advanced Secure Gateway/ProxySG Web Management Console توثيق ضعيفFirewall SoftwareNot DefinedNot Defined0.010.00216CVE-2021-30648
27/04/20217.37.0Symantec Security Analytics Web UI تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.010.00331CVE-2021-30642
10/12/20204.34.1Symantec Messaging Gateway Web UI الكشف عن المعلوماتغير معروفNot DefinedOfficial Fix0.030.00065CVE-2020-12595
10/12/20208.88.4Symantec Messaging Gateway CLI تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.030.00114CVE-2020-12594
19/11/20205.55.3Symantec Endpoint Detection & Response الكشف عن المعلوماتغير معروفNot DefinedOfficial Fix0.060.00115CVE-2020-12593
08/07/20206.46.1Symantec Endpoint Detection/Response الكشف عن المعلوماتغير معروفNot DefinedOfficial Fix0.010.00129CVE-2020-5839
13/05/20203.63.4Symantec IT Analytics سكربتات مشتركةغير معروفNot DefinedOfficial Fix0.010.00054CVE-2020-5838
11/05/20207.87.5Symantec Endpoint Protection Log File تجاوز الصلاحياتAnti-Malware SoftwareNot DefinedOfficial Fix0.030.00045CVE-2020-5837
11/05/20207.16.8Symantec Endpoint Protection ACL تجاوز الصلاحياتAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00045CVE-2020-5836
11/05/20206.86.5Symantec Endpoint Protection Manager Client Remote Deployment حالة السباقAnti-Malware SoftwareNot DefinedOfficial Fix0.080.00045CVE-2020-5835
11/05/20206.05.7Symantec Endpoint Protection Manager اجتياز الدليلAnti-Malware SoftwareNot DefinedOfficial Fix0.020.00074CVE-2020-5834
11/05/20204.03.8Symantec Endpoint Protection Manager الكشف عن المعلوماتAnti-Malware SoftwareNot DefinedOfficial Fix0.060.00045CVE-2020-5833
06/04/20206.56.3Symantec Data Center Security Manager تجاوز الصلاحياتغير معروفNot DefinedOfficial Fix0.000.00045CVE-2020-5832
03/02/20204.03.8Symantec Endpoint Protection الكشف عن المعلوماتAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00045CVE-2020-5831
03/02/20204.03.8Symantec Endpoint Protection الكشف عن المعلوماتAnti-Malware SoftwareNot DefinedOfficial Fix0.010.00045CVE-2020-5830
03/02/20204.03.8Symantec Endpoint Protection الكشف عن المعلوماتAnti-Malware SoftwareNot DefinedOfficial Fix0.010.00045CVE-2020-5829
03/02/20204.03.8Symantec Endpoint Protection الكشف عن المعلوماتAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00045CVE-2020-5828

592 بعض الادخالات لم يتم عرضها

Might our Artificial Intelligence support you?

Check our Alexa App!