Symantec Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Symantec Endpoint Protection68
Symantec Web Gateway37
Symantec Endpoint Protection Manager34
Symantec Norton Antivirus26
Symantec Messaging Gateway22

Przeciwdziałanie

Official Fix477
Temporary Fix0
Workaround13
Unavailable8
Not Defined119

Wykorzystywanie

High50
Functional1
Proof-of-Concept248
Unproven35
Not Defined283

Wektor dostępu

Not Defined0
Physical1
Local151
Adjacent59
Network406

Uwierzytelnianie

Not Defined0
High26
Low177
None414

Interakcja z użytkownikiem

Not Defined0
Required82
None535

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤442
≤560
≤6155
≤780
≤8149
≤961
≤1069

CVSSv3 Temp

≤10
≤20
≤34
≤455
≤595
≤6140
≤7126
≤8107
≤953
≤1037

VulDB

≤10
≤21
≤39
≤444
≤564
≤6164
≤760
≤8149
≤957
≤1069

NVD

≤10
≤20
≤32
≤48
≤512
≤631
≤727
≤858
≤915
≤1013

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤91
≤100

Sprzedawca

≤10
≤20
≤33
≤48
≤59
≤69
≤717
≤811
≤91
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k4
<5k49
<10k184
<25k267
<50k106
<100k5
≥100k1

Wykorzystaj dzisiaj

<1k552
<2k10
<5k25
<10k21
<25k9
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (174): ASG (2), AV Engine (1), Advanced Secure Gateway (9), Altiris (1), Altiris Deployment Solution (19), Altiris IT Management Suite (1), Altiris Notification Server (6), Altiris WISE Package Studio (1), Anti-Virus Engine (1), AntiVirus (17), AntiVirus Corporate Edition (3), AntiVirus Scan Engine (1), Antivirus (2), Antivirus Scan Engine (5), AppStream (1), AppStream Client (1), Automated Support Assistant (3), Backup (2), Backup Exec (18), Backup Exec System Recovery (2), BackupExec System Recovery (1), Backupexec System Recovery (4), Brightmail AntiSpam (6), Brightmail Antispam (1), Brightmail Gateway (1), Brightmail Gateway Appliance (2), CacheFlow (1), Client Security (6), Clientless Vpn Gateway 4400 (1), Cluster Server (1), Compliance Server (2), Content Analysis Module (1), Critical System Protection (6), Data Center Security (9), Data Center Security Manager (1), Data Insight (2), Data Loss Prevention (4), Data Loss Prevention Detection Servers (1), Deployment Solution (1), Encryption Desktop (10), Encryption Management Server (9), Endpoint Detection (2), Endpoint Detection & Response (1), Endpoint Detection and Response Appliance (1), Endpoint Encryption (9), Endpoint Protection (68), Endpoint Protection AVEngine (2), Endpoint Protection Manager (34), Endpoint Protection SBE (1), Endpoint Protection Small Business Edition (15), Enterprise Firewall (14), Enterprise Security Manager (4), Enterprise Server (1), Enterprise Vault (1), Filter (1), Firewall (7), Gateway (4), Gateway Security (3), Gateway Security 5400 (1), Ghost (2), Ghost Solution Suite (1), Ghost Solutions Suite (3), I-gear (1), IM Manager (8), IT Analytics (1), ITMS (1), Industrial Control System Protection (1), Install Norton Security (1), IntelligenceCenter (1), Java! JIT Compiler (1), Layer7 API Management OAuth Toolkit (1), LiveUpdate (12), LiveUpdate Administrator (2), Livestate Agent (1), Mail-Gear (1), Mail Security (7), Mail Security Appliance (1), Mail Security for Domino (2), Mail Security for MS Exchange (1), Mail Security for Microsoft Exchange (2), Mail Threat Defense (1), Management Agent (2), Management Center (1), Management Console (2), Management Platform (1), Message Filter (4), Message Gateway (2), Messaging Gateway (22), Messaging Gateway SMG (2), Mobile Security (1), My VIP Portal (1), NetBackup (1), NetBackup Appliance (1), NetBackup OpsCenter Server (1), NetBackup PureDisk (1), NetBackup PureDisk Remote Office Edition (1), NetBackup Server (1), Network Access Control (2), Norton 360 (1), Norton Anti-Virus (1), Norton AntiVirus (13), Norton Antispam (1), Norton Antivirus (26), Norton Antivirus for Internet Email Gateway (1), Norton Core (1), Norton Ghost (9), Norton Internet Security (13), Norton Internet Security 2008 (1), Norton Internet Security 2010 (1), Norton Personal Firewall (8), Norton Security (3), Norton System Works (4), Norton Utilities (1), Norton_internet_security (2), ON Command CCM (1), On-Demand Agent (1), On Command Discovery (1), PGP (1), PGP Desktop (2), PGP Universal Server (1), PGP Whole Disk Encryption (1), PowerQuest DeployCenter (1), Products (1), ProxyClient (1), ProxySG (11), Raptor (1), Raptor Firewall (3), Reporter (1), Reporter CLI (1), Reporter Web UI (1), Response (2), SAV (1), SONAR (1), SSL Visibility (1), Security Analytics (2), Security Check Service (1), Security Check Virus Detection (1), SecurityExpressions Audit (2), Security Information Manager (4), Storage Foundation (1), Sygate Management Server (1), Sygate NAC (1), Sygate Personal Firewall (2), Symantec Antivirus Scan Engine (2), Symantec Endpoint Protection Cloud (2), System Recovery (1), System Works (1), VIP Access Desktop (1), VIP Access for Desktop (1), VIP Enterprise Gateway (1), VPN (2), VPN Appliance (2), VPN Appliances (2), Velociraptor (2), Veritas Backup (1), Veritas Backup Exec (2), Veritas Cluster Server (1), Veritas Command Central Storage Change Manager (1), Veritas File System (2), Veritas Netbackup (5), Veritas Netbackup Server (1), Veritas Storage Foundation (3), Veritas Volume Manager (1), Veritas Volume Replicator (1), Web Gateway (37), Web Isolation (1), Web Security (6), WinFax Pro (1), Workspace Streaming (4), Workspace Virtualization (3), i3 Focalpoint Server (1), iCommand (1), norton antivirus (2), pcAnywhere (21)

Link to Vendor Website: https://www.symantec.com/

OpublikowanoBaseTempSłaby punktProdWykPrzCTIEPSSCVE
2023-01-217.06.9Symantec Endpoint Protection privilege escalationAnti-Malware SoftwareNot DefinedOfficial Fix0.050.00043CVE-2022-25631
2022-12-016.56.4Symantec Endpoint Protection privilege escalationAnti-Malware SoftwareNot DefinedOfficial Fix0.090.00048CVE-2022-37017
2022-12-017.67.6Symantec Endpoint Protection privilege escalationAnti-Malware SoftwareNot DefinedNot Defined0.050.00091CVE-2022-37016
2022-11-097.67.5Symantec Endpoint Detection and Response Appliance Privilege EscalationNieznanyNot DefinedOfficial Fix0.020.00092CVE-2022-37015
2022-07-287.37.3Symantec Veritas Netbackup weak authenticationBackup SoftwareNot DefinedNot Defined0.030.00055CVE-2022-36956
2022-07-078.28.2Symantec Advanced Secure Gateway/ProxySG HTTP weak authenticationFirewall SoftwareNot DefinedNot Defined0.000.00104CVE-2021-46825
2022-03-058.88.8Symantec Management Agent Registry privilege escalationNieznanyNot DefinedNot Defined0.030.00043CVE-2022-25623
2022-02-183.53.4Symantec Layer7 API Management OAuth Toolkit Web UI cross site scriptingAutomation SoftwareNot DefinedOfficial Fix0.050.00086CVE-2021-30650
2021-07-016.36.3Symantec Advanced Secure Gateway/ProxySG Web Management Console weak authenticationFirewall SoftwareNot DefinedNot Defined0.010.00216CVE-2021-30648
2021-04-277.37.0Symantec Security Analytics Web UI privilege escalationNieznanyNot DefinedOfficial Fix0.000.00331CVE-2021-30642
2020-12-104.34.1Symantec Messaging Gateway Web UI information disclosureNieznanyNot DefinedOfficial Fix0.030.00065CVE-2020-12595
2020-12-108.88.4Symantec Messaging Gateway CLI privilege escalationNieznanyNot DefinedOfficial Fix0.030.00114CVE-2020-12594
2020-11-195.55.3Symantec Endpoint Detection & Response information disclosureNieznanyNot DefinedOfficial Fix0.060.00115CVE-2020-12593
2020-07-086.46.1Symantec Endpoint Detection/Response information disclosureNieznanyNot DefinedOfficial Fix0.010.00129CVE-2020-5839
2020-05-133.63.4Symantec IT Analytics cross site scriptingNieznanyNot DefinedOfficial Fix0.010.00054CVE-2020-5838
2020-05-117.87.5Symantec Endpoint Protection Log File privilege escalationAnti-Malware SoftwareNot DefinedOfficial Fix0.030.00045CVE-2020-5837
2020-05-117.16.8Symantec Endpoint Protection ACL privilege escalationAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00045CVE-2020-5836
2020-05-116.86.5Symantec Endpoint Protection Manager Client Remote Deployment race conditionAnti-Malware SoftwareNot DefinedOfficial Fix0.080.00045CVE-2020-5835
2020-05-116.05.7Symantec Endpoint Protection Manager directory traversalAnti-Malware SoftwareNot DefinedOfficial Fix0.070.00074CVE-2020-5834
2020-05-114.03.8Symantec Endpoint Protection Manager information disclosureAnti-Malware SoftwareNot DefinedOfficial Fix0.060.00045CVE-2020-5833
2020-04-066.56.3Symantec Data Center Security Manager privilege escalationNieznanyNot DefinedOfficial Fix0.000.00045CVE-2020-5832
2020-02-034.03.8Symantec Endpoint Protection information disclosureAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00045CVE-2020-5831
2020-02-034.03.8Symantec Endpoint Protection information disclosureAnti-Malware SoftwareNot DefinedOfficial Fix0.010.00045CVE-2020-5830
2020-02-034.03.8Symantec Endpoint Protection information disclosureAnti-Malware SoftwareNot DefinedOfficial Fix0.010.00045CVE-2020-5829
2020-02-034.03.8Symantec Endpoint Protection information disclosureAnti-Malware SoftwareNot DefinedOfficial Fix0.000.00045CVE-2020-5828

592 więcej wpisów nie jest pokazywanych

Want to stay up to date on a daily basis?

Enable the mail alert feature now!