Symantec Vulnerabilità

Sequenza temporale

Genere

Prodotto

Symantec Endpoint Protection68
Symantec Web Gateway37
Symantec Endpoint Protection Manager34
Symantec Norton Antivirus26
Symantec Messaging Gateway24

Contromisure

Official Fix478
Temporary Fix0
Workaround13
Unavailable8
Not Defined125

Sfruttabilità

High50
Functional1
Proof-of-Concept248
Unproven35
Not Defined290

Accesso al vettore

Not Defined0
Physical1
Local151
Adjacent60
Network412

Autenticazione

Not Defined0
High27
Low178
None419

Interazione dell'utente

Not Defined0
Required83
None541

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤442
≤560
≤6157
≤780
≤8150
≤961
≤1073

CVSSv3 Temp

≤10
≤20
≤34
≤455
≤594
≤6142
≤7126
≤8109
≤953
≤1041

VulDB

≤10
≤21
≤310
≤444
≤564
≤6165
≤761
≤8149
≤957
≤1073

NVD

≤10
≤20
≤32
≤48
≤512
≤632
≤728
≤858
≤915
≤1017

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤91
≤105

Fornitore

≤10
≤20
≤33
≤48
≤59
≤69
≤717
≤811
≤91
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k1
<2k5
<5k48
<10k188
<25k270
<50k106
<100k5
≥100k1

Exploiter aujourd'hui

<1k553
<2k11
<5k29
<10k19
<25k12
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (177): ASG (2), AV Engine (1), Advanced Secure Gateway (9), Altiris (1), Altiris Deployment Solution (19), Altiris IT Management Suite (1), Altiris Notification Server (6), Altiris WISE Package Studio (1), Anti-Virus Engine (1), AntiVirus (17), AntiVirus Corporate Edition (3), AntiVirus Scan Engine (1), Antivirus (2), Antivirus Scan Engine (5), AppStream (1), AppStream Client (1), Automated Support Assistant (3), Backup (2), Backup Exec (18), Backup Exec System Recovery (2), BackupExec System Recovery (1), Backupexec System Recovery (4), Brightmail AntiSpam (6), Brightmail Antispam (1), Brightmail Gateway (1), Brightmail Gateway Appliance (2), CacheFlow (1), Client Security (6), Clientless Vpn Gateway 4400 (1), Cluster Server (1), Compliance Server (2), Content Analysis Module (1), Critical System Protection (6), Data Center Security (9), Data Center Security Manager (1), Data Insight (2), Data Loss Prevention (5), Data Loss Prevention Detection Servers (1), Deployment Solution (2), Encryption Desktop (10), Encryption Management Server (9), Endpoint Detection (2), Endpoint Detection & Response (1), Endpoint Detection and Response Appliance (1), Endpoint Encryption (9), Endpoint Protection (68), Endpoint Protection AVEngine (2), Endpoint Protection Manager (34), Endpoint Protection SBE (1), Endpoint Protection Small Business Edition (15), Enterprise Firewall (14), Enterprise Security Manager (4), Enterprise Server (1), Enterprise Vault (1), Filter (1), Firewall (7), Gateway (4), Gateway Security (3), Gateway Security 5400 (1), Ghost (2), Ghost Solution Suite (1), Ghost Solutions Suite (3), I-gear (1), IM Manager (8), IT Analytics (1), ITMS (1), Identity Portal (1), Industrial Control System Protection (1), Install Norton Security (1), IntelligenceCenter (1), Java! JIT Compiler (1), Layer7 API Management OAuth Toolkit (1), LiveUpdate (12), LiveUpdate Administrator (2), Livestate Agent (1), Mail-Gear (1), Mail Security (7), Mail Security Appliance (1), Mail Security for Domino (2), Mail Security for MS Exchange (1), Mail Security for Microsoft Exchange (2), Mail Threat Defense (1), Management Agent (2), Management Center (1), Management Console (2), Management Platform (1), Message Filter (4), Message Gateway (2), Messaging Gateway (24), Messaging Gateway SMG (2), Mobile Security (1), My VIP Portal (1), NetBackup (1), NetBackup Appliance (1), NetBackup OpsCenter Server (1), NetBackup PureDisk (1), NetBackup PureDisk Remote Office Edition (1), NetBackup Server (1), Network Access Control (2), Norton 360 (1), Norton Anti-Virus (1), Norton AntiVirus (13), Norton Antispam (1), Norton Antivirus (26), Norton Antivirus for Internet Email Gateway (1), Norton Core (1), Norton Ghost (9), Norton Internet Security (13), Norton Internet Security 2008 (1), Norton Internet Security 2010 (1), Norton Personal Firewall (8), Norton Security (3), Norton System Works (4), Norton Utilities (1), Norton_internet_security (2), ON Command CCM (1), On-Demand Agent (1), On Command Discovery (1), PGP (1), PGP Desktop (2), PGP Universal Server (1), PGP Whole Disk Encryption (1), PowerQuest DeployCenter (1), Products (1), Protection Engine (1), ProxyClient (1), ProxySG (11), Raptor (1), Raptor Firewall (3), Reporter (1), Reporter CLI (1), Reporter Web UI (1), Response (2), SAV (1), SONAR (1), SSL Visibility (1), Security Analytics (2), Security Check Service (1), Security Check Virus Detection (1), SecurityExpressions Audit (2), Security Information Manager (4), Server Management Suite (1), Storage Foundation (1), Sygate Management Server (1), Sygate NAC (1), Sygate Personal Firewall (2), Symantec Antivirus Scan Engine (2), Symantec Endpoint Protection Cloud (2), System Recovery (1), System Works (1), VIP Access Desktop (1), VIP Access for Desktop (1), VIP Enterprise Gateway (1), VPN (2), VPN Appliance (2), VPN Appliances (2), Velociraptor (2), Veritas Backup (1), Veritas Backup Exec (2), Veritas Cluster Server (1), Veritas Command Central Storage Change Manager (1), Veritas File System (2), Veritas Netbackup (5), Veritas Netbackup Server (1), Veritas Storage Foundation (3), Veritas Volume Manager (1), Veritas Volume Replicator (1), Web Gateway (37), Web Isolation (1), Web Security (6), WinFax Pro (1), Workspace Streaming (4), Workspace Virtualization (3), i3 Focalpoint Server (1), iCommand (1), norton antivirus (2), pcAnywhere (21)

Link to Vendor Website: https://www.symantec.com/

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
26/01/20247.97.9Symantec Data Loss Prevention Document buffer overflowData Loss Prevention SoftwareNot DefinedNot Defined0.002090.02CVE-2024-23617
26/01/20249.99.9Symantec Server Management Suite buffer overflowSconosciutoNot DefinedNot Defined0.002130.02CVE-2024-23616
26/01/20249.99.9Symantec Deployment Solution UpdateComputer Token Parser buffer overflowSconosciutoNot DefinedNot Defined0.001830.03CVE-2024-23613
26/01/20249.99.9Symantec Messaging Gateway buffer overflowSconosciutoNot DefinedNot Defined0.002130.03CVE-2024-23615
26/01/20249.99.9Symantec Messaging Gateway buffer overflowSconosciutoNot DefinedNot Defined0.002130.02CVE-2024-23614
27/09/20235.35.3Symantec Protection Engine Hash rivelazione di un 'informazioneSconosciutoNot DefinedOfficial Fix0.000490.02CVE-2023-23958
19/09/20235.55.5Symantec Identity Portal Query Parameter RedirectSconosciutoNot DefinedNot Defined0.000460.00CVE-2023-23957
21/01/20237.06.9Symantec Endpoint Protection escalazione di privilegiAnti-Malware SoftwareNot DefinedOfficial Fix0.000430.03CVE-2022-25631
01/12/20226.56.4Symantec Endpoint Protection escalazione di privilegiAnti-Malware SoftwareNot DefinedOfficial Fix0.000640.02CVE-2022-37017
01/12/20227.67.6Symantec Endpoint Protection escalazione di privilegiAnti-Malware SoftwareNot DefinedNot Defined0.001860.04CVE-2022-37016
09/11/20227.67.5Symantec Endpoint Detection and Response Appliance Privilege EscalationSconosciutoNot DefinedOfficial Fix0.001440.00CVE-2022-37015
28/07/20227.37.3Symantec Veritas Netbackup autenticazione deboleBackup SoftwareNot DefinedNot Defined0.001040.00CVE-2022-36956
07/07/20228.28.2Symantec Advanced Secure Gateway/ProxySG HTTP autenticazione deboleFirewall SoftwareNot DefinedNot Defined0.002780.00CVE-2021-46825
05/03/20228.88.8Symantec Management Agent Registry escalazione di privilegiSconosciutoNot DefinedNot Defined0.000450.00CVE-2022-25623
18/02/20223.53.4Symantec Layer7 API Management OAuth Toolkit Web UI cross site scriptingAutomation SoftwareNot DefinedOfficial Fix0.001040.00CVE-2021-30650
01/07/20216.36.3Symantec Advanced Secure Gateway/ProxySG Web Management Console autenticazione deboleFirewall SoftwareNot DefinedNot Defined0.003320.00CVE-2021-30648
27/04/20217.37.0Symantec Security Analytics Web UI escalazione di privilegiSconosciutoNot DefinedOfficial Fix0.004520.00CVE-2021-30642
10/12/20204.34.1Symantec Messaging Gateway Web UI rivelazione di un 'informazioneSconosciutoNot DefinedOfficial Fix0.000650.02CVE-2020-12595
10/12/20208.88.4Symantec Messaging Gateway CLI escalazione di privilegiSconosciutoNot DefinedOfficial Fix0.001140.00CVE-2020-12594
19/11/20205.55.3Symantec Endpoint Detection & Response rivelazione di un 'informazioneSconosciutoNot DefinedOfficial Fix0.001290.03CVE-2020-12593
08/07/20206.46.1Symantec Endpoint Detection/Response rivelazione di un 'informazioneSconosciutoNot DefinedOfficial Fix0.001290.00CVE-2020-5839
13/05/20203.63.4Symantec IT Analytics cross site scriptingSconosciutoNot DefinedOfficial Fix0.000540.00CVE-2020-5838
11/05/20207.87.5Symantec Endpoint Protection Log File escalazione di privilegiAnti-Malware SoftwareNot DefinedOfficial Fix0.000450.00CVE-2020-5837
11/05/20207.16.8Symantec Endpoint Protection ACL escalazione di privilegiAnti-Malware SoftwareNot DefinedOfficial Fix0.000450.03CVE-2020-5836
11/05/20206.86.5Symantec Endpoint Protection Manager Client Remote Deployment race conditionAnti-Malware SoftwareNot DefinedOfficial Fix0.000450.04CVE-2020-5835

599 non vengono visualizzate più voci

Do you want to use VulDB in your project?

Use the official API to access entries easily!