Endpoint Protection Manager
Vendor:
First CVE: Jun 20, 2013 · Active for 13 years
41
Total CVEs
More Total CVEs than 98% of tracked products
6.8
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 30% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Endpoint Protection Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 20, 2013
13 years ago
Most Recent CVE
May 11, 2020
2,269 days ago
CVE Severity & Scoring
Endpoint Protection Manager41 CVEs
17%
34%
49%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local10 (24.4%)
Network15 (36.6%)
Unknown15 (36.6%)
Physical1 (2.4%)
Adjacent Network0 (0.0%)
Attack Complexity
Low24 (58.5%)
High2 (4.9%)
Unknown15 (36.6%)
User Interaction
None18 (43.9%)
Unknown15 (36.6%)
Required8 (19.5%)
Privileges Required
Low22 (53.7%)
High0 (0.0%)
None4 (9.8%)
Unknown15 (36.6%)
Top CVEs
Signals from CVEs in this product scope (41 CVEs).
41 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-5014HIGH The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Editi | Feb 14, 2014 | 7.5 | 78 | NO | YES |
CVE-2015-1486HIGH The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action | Aug 1, 2015 | 7.5 | 72 | NO | YES |
CVE-2015-1487MEDIUM The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtai | Aug 1, 2015 | 5.5 | 57 | NO | YES |
CVE-2013-5015MEDIUM SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protect | Feb 14, 2014 | 6.5 | 56 | NO | YES |
CVE-2015-1489HIGH The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors. | Aug 1, 2015 | 8.5 | 52 | NO | YES |
CVE-2016-3653HIGH Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users | Jun 30, 2016 | 8.0 | 33 | NO | YES |
CVE-2014-3437HIGH The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via X | Nov 7, 2014 | 7.5 | 32 | NO | YES |
CVE-2016-5304MEDIUM Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to | Jun 30, 2016 | 6.8 | 30 | NO | YES |
CVE-2013-1612HIGH Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Bus | Jun 20, 2013 | 7.9 | 30 | NO | YES |
CVE-2014-3439MEDIUM ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors. | Nov 7, 2014 | 6.1 | 27 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (41 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
5 CVEs
12.2% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
12 CVEs
29.3% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (41 CVEs).
Media Mentions
Signals from CVEs in this product scope (41 CVEs).
Top CNAs Publishing CVEs For Endpoint Protection Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 14.2 | 7 | 3.8 | 0.4% | 0 | 0 |
| 14.1 | 1 | 7.8 | 1.7% | 0 | 0 |
| 14.0.1 | 1 | 7.8 | 1.7% | 0 | 0 |
| 14 | 1 | 7.8 | 1.7% | 0 | 0 |
| 12.1.3 | 5 | 6.4 | 22.9% | 0 | 5 |
| 12.1.2 | 6 | 6.6 | 19.8% | 0 | 6 |
| 12.1.1 | 6 | 6.6 | 19.8% | 0 | 6 |
| 12.1.0 | 13 | 6.6 | 20.2% | 0 | 9 |
| 12.1 | 1 | 7.8 | 1.7% | 0 | 0 |
| 11.0 | 2 | 7.0 | 48.2% | 0 | 2 |