Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:security_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductSecurity Analytics (583c058e-59a0-5ce1-a1a4-e35722755123)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-30642 vulnerable 2026-06-08 05:31:51.229458 Details available
An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.
Published: 2021-04-27T14:49:37.000Z
Updated: 2024-08-03T22:40:31.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12241 vulnerable 2026-06-08 05:10:41.283803 Details available
The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious JavaScript code into the SA web UI client application.
Published: 2018-11-27T18:00:00.000Z
Updated: 2024-08-05T08:30:58.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.