CVE-2013-5015

CVE-2013-5015 is a SQL injection vulnerability present in the management console of Symantec Endpoint Protection Manager (SEPM) versions 11.0 and 12.1, and Symantec Protection Center Small Business Edition 12.x. This flaw allows remote authenticated users to execute arbitrary SQL commands through unspecified vectors. With a CVSS score of 6.5, this vulnerability is of medium severity, requiring authentication (Au:S) but having low attack complexity (AC:L) over a network (AV:N), potentially leading to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). While not listed on the KEV catalog, exploit intelligence indicates the availability of Metasploit modules and ExploitDB entries demonstrating remote command execution, suggesting a high potential for exploitation despite limited community discussion or media coverage.