Symantec Vulnerabilidad

Cronología

Escribe

Producto

Symantec Endpoint Protection68
Symantec Web Gateway37
Symantec Endpoint Protection Manager34
Symantec Norton Antivirus26
Symantec Messaging Gateway24

Contramedidas

Official Fix478
Temporary Fix0
Workaround13
Unavailable8
Not Defined125

Explotabilidad

High50
Functional1
Proof-of-Concept248
Unproven35
Not Defined290

Vector de acceso

Not Defined0
Physical1
Local151
Adjacent60
Network412

Autenticación

Not Defined0
High27
Low178
None419

La interacción del usuario

Not Defined0
Required83
None541

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤442
≤560
≤6157
≤780
≤8150
≤961
≤1073

CVSSv3 Temp

≤10
≤20
≤34
≤455
≤594
≤6142
≤7126
≤8109
≤952
≤1042

VulDB

≤10
≤21
≤310
≤444
≤564
≤6165
≤761
≤8149
≤957
≤1073

NVD

≤10
≤20
≤32
≤48
≤512
≤632
≤728
≤858
≤915
≤1017

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤91
≤105

Proveedor

≤10
≤20
≤33
≤48
≤59
≤69
≤717
≤811
≤91
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k1
<2k5
<5k48
<10k188
<25k270
<50k106
<100k5
≥100k1

Explotar hoy

<1k551
<2k15
<5k24
<10k21
<25k13
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (177): ASG (2), AV Engine (1), Advanced Secure Gateway (9), Altiris (1), Altiris Deployment Solution (19), Altiris IT Management Suite (1), Altiris Notification Server (6), Altiris WISE Package Studio (1), Anti-Virus Engine (1), AntiVirus (17), AntiVirus Corporate Edition (3), AntiVirus Scan Engine (1), Antivirus (2), Antivirus Scan Engine (5), AppStream (1), AppStream Client (1), Automated Support Assistant (3), Backup (2), Backup Exec (18), Backup Exec System Recovery (2), BackupExec System Recovery (1), Backupexec System Recovery (4), Brightmail AntiSpam (6), Brightmail Antispam (1), Brightmail Gateway (1), Brightmail Gateway Appliance (2), CacheFlow (1), Client Security (6), Clientless Vpn Gateway 4400 (1), Cluster Server (1), Compliance Server (2), Content Analysis Module (1), Critical System Protection (6), Data Center Security (9), Data Center Security Manager (1), Data Insight (2), Data Loss Prevention (5), Data Loss Prevention Detection Servers (1), Deployment Solution (2), Encryption Desktop (10), Encryption Management Server (9), Endpoint Detection (2), Endpoint Detection & Response (1), Endpoint Detection and Response Appliance (1), Endpoint Encryption (9), Endpoint Protection (68), Endpoint Protection AVEngine (2), Endpoint Protection Manager (34), Endpoint Protection SBE (1), Endpoint Protection Small Business Edition (15), Enterprise Firewall (14), Enterprise Security Manager (4), Enterprise Server (1), Enterprise Vault (1), Filter (1), Firewall (7), Gateway (4), Gateway Security (3), Gateway Security 5400 (1), Ghost (2), Ghost Solution Suite (1), Ghost Solutions Suite (3), I-gear (1), IM Manager (8), IT Analytics (1), ITMS (1), Identity Portal (1), Industrial Control System Protection (1), Install Norton Security (1), IntelligenceCenter (1), Java! JIT Compiler (1), Layer7 API Management OAuth Toolkit (1), LiveUpdate (12), LiveUpdate Administrator (2), Livestate Agent (1), Mail-Gear (1), Mail Security (7), Mail Security Appliance (1), Mail Security for Domino (2), Mail Security for MS Exchange (1), Mail Security for Microsoft Exchange (2), Mail Threat Defense (1), Management Agent (2), Management Center (1), Management Console (2), Management Platform (1), Message Filter (4), Message Gateway (2), Messaging Gateway (24), Messaging Gateway SMG (2), Mobile Security (1), My VIP Portal (1), NetBackup (1), NetBackup Appliance (1), NetBackup OpsCenter Server (1), NetBackup PureDisk (1), NetBackup PureDisk Remote Office Edition (1), NetBackup Server (1), Network Access Control (2), Norton 360 (1), Norton Anti-Virus (1), Norton AntiVirus (13), Norton Antispam (1), Norton Antivirus (26), Norton Antivirus for Internet Email Gateway (1), Norton Core (1), Norton Ghost (9), Norton Internet Security (13), Norton Internet Security 2008 (1), Norton Internet Security 2010 (1), Norton Personal Firewall (8), Norton Security (3), Norton System Works (4), Norton Utilities (1), Norton_internet_security (2), ON Command CCM (1), On-Demand Agent (1), On Command Discovery (1), PGP (1), PGP Desktop (2), PGP Universal Server (1), PGP Whole Disk Encryption (1), PowerQuest DeployCenter (1), Products (1), Protection Engine (1), ProxyClient (1), ProxySG (11), Raptor (1), Raptor Firewall (3), Reporter (1), Reporter CLI (1), Reporter Web UI (1), Response (2), SAV (1), SONAR (1), SSL Visibility (1), Security Analytics (2), Security Check Service (1), Security Check Virus Detection (1), SecurityExpressions Audit (2), Security Information Manager (4), Server Management Suite (1), Storage Foundation (1), Sygate Management Server (1), Sygate NAC (1), Sygate Personal Firewall (2), Symantec Antivirus Scan Engine (2), Symantec Endpoint Protection Cloud (2), System Recovery (1), System Works (1), VIP Access Desktop (1), VIP Access for Desktop (1), VIP Enterprise Gateway (1), VPN (2), VPN Appliance (2), VPN Appliances (2), Velociraptor (2), Veritas Backup (1), Veritas Backup Exec (2), Veritas Cluster Server (1), Veritas Command Central Storage Change Manager (1), Veritas File System (2), Veritas Netbackup (5), Veritas Netbackup Server (1), Veritas Storage Foundation (3), Veritas Volume Manager (1), Veritas Volume Replicator (1), Web Gateway (37), Web Isolation (1), Web Security (6), WinFax Pro (1), Workspace Streaming (4), Workspace Virtualization (3), i3 Focalpoint Server (1), iCommand (1), norton antivirus (2), pcAnywhere (21)

Link to Vendor Website: https://www.symantec.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2024-01-267.97.9Symantec Data Loss Prevention Document desbordamiento de búferData Loss Prevention SoftwareNot DefinedNot Defined0.002090.02CVE-2024-23617
2024-01-269.99.9Symantec Server Management Suite desbordamiento de búferDesconocidoNot DefinedNot Defined0.002130.02CVE-2024-23616
2024-01-269.99.9Symantec Deployment Solution UpdateComputer Token Parser desbordamiento de búferDesconocidoNot DefinedNot Defined0.001830.03CVE-2024-23613
2024-01-269.99.9Symantec Messaging Gateway desbordamiento de búferDesconocidoNot DefinedNot Defined0.002130.03CVE-2024-23615
2024-01-269.99.9Symantec Messaging Gateway desbordamiento de búferDesconocidoNot DefinedNot Defined0.002130.02CVE-2024-23614
2023-09-275.35.3Symantec Protection Engine Hash divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.000490.02CVE-2023-23958
2023-09-195.55.5Symantec Identity Portal Query Parameter RedirectDesconocidoNot DefinedNot Defined0.000460.00CVE-2023-23957
2023-01-217.06.9Symantec Endpoint Protection escalada de privilegiosAnti-Malware SoftwareNot DefinedOfficial Fix0.000430.03CVE-2022-25631
2022-12-016.56.4Symantec Endpoint Protection escalada de privilegiosAnti-Malware SoftwareNot DefinedOfficial Fix0.000640.02CVE-2022-37017
2022-12-017.67.6Symantec Endpoint Protection escalada de privilegiosAnti-Malware SoftwareNot DefinedNot Defined0.001860.04CVE-2022-37016
2022-11-097.67.5Symantec Endpoint Detection and Response Appliance Privilege EscalationDesconocidoNot DefinedOfficial Fix0.001750.00CVE-2022-37015
2022-07-287.37.3Symantec Veritas Netbackup autenticación débilBackup SoftwareNot DefinedNot Defined0.001040.00CVE-2022-36956
2022-07-078.28.2Symantec Advanced Secure Gateway/ProxySG HTTP autenticación débilFirewall SoftwareNot DefinedNot Defined0.002780.00CVE-2021-46825
2022-03-058.88.8Symantec Management Agent Registry escalada de privilegiosDesconocidoNot DefinedNot Defined0.000450.00CVE-2022-25623
2022-02-183.53.4Symantec Layer7 API Management OAuth Toolkit Web UI cross site scriptingAutomation SoftwareNot DefinedOfficial Fix0.001040.00CVE-2021-30650
2021-07-016.36.3Symantec Advanced Secure Gateway/ProxySG Web Management Console autenticación débilFirewall SoftwareNot DefinedNot Defined0.003320.00CVE-2021-30648
2021-04-277.37.0Symantec Security Analytics Web UI escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.004520.00CVE-2021-30642
2020-12-104.34.1Symantec Messaging Gateway Web UI divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.000650.02CVE-2020-12595
2020-12-108.88.4Symantec Messaging Gateway CLI escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.001140.00CVE-2020-12594
2020-11-195.55.3Symantec Endpoint Detection & Response divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.001290.03CVE-2020-12593
2020-07-086.46.1Symantec Endpoint Detection/Response divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.001290.00CVE-2020-5839
2020-05-133.63.4Symantec IT Analytics cross site scriptingDesconocidoNot DefinedOfficial Fix0.000540.00CVE-2020-5838
2020-05-117.87.5Symantec Endpoint Protection Log File escalada de privilegiosAnti-Malware SoftwareNot DefinedOfficial Fix0.000450.00CVE-2020-5837
2020-05-117.16.8Symantec Endpoint Protection ACL escalada de privilegiosAnti-Malware SoftwareNot DefinedOfficial Fix0.000450.03CVE-2020-5836
2020-05-116.86.5Symantec Endpoint Protection Manager Client Remote Deployment condición de carreraAnti-Malware SoftwareNot DefinedOfficial Fix0.000450.04CVE-2020-5835

599 no se muestran más entradas

Do you want to use VulDB in your project?

Use the official API to access entries easily!