Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*

part: a version: * update: mp4

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductEndpoint Protection Manager (9e18c6c8-d00a-5660-ba84-141e844a136f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5307 vulnerable 2026-06-08 05:07:56.664837 Details available
Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors.
Published: 2016-06-30T23:00:00.000Z
Updated: 2024-08-06T01:00:58.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5306 vulnerable 2026-06-08 05:07:56.664529 Details available
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for unintended HTTP traffic on port 8445.
Published: 2016-06-30T23:00:00.000Z
Updated: 2024-08-06T01:00:57.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5305 vulnerable 2026-06-08 05:07:56.664185 Details available
Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack.
Published: 2016-06-30T23:00:00.000Z
Updated: 2024-08-06T01:00:58.042Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5304 vulnerable 2026-06-08 05:07:56.663761 Details available
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2016-06-30T23:00:00.000Z
Updated: 2024-08-06T01:00:58.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3653 vulnerable 2026-06-08 05:07:45.759564 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to hijack the authentication of arbitrary users.
Published: 2016-06-30T23:00:00.000Z
Updated: 2024-08-06T00:03:34.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3652 vulnerable 2026-06-08 05:07:45.759249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3651 vulnerable 2026-06-08 05:07:45.758930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3650 vulnerable 2026-06-08 05:07:45.758637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3649 vulnerable 2026-06-08 05:07:45.758324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3648 vulnerable 2026-06-08 05:07:45.757999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3647 vulnerable 2026-06-08 05:07:45.757561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8801 vulnerable 2026-06-08 05:07:04.930034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.