Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:endpoint_detection_and_response:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductEndpoint Detection And Response (cb936fd2-c889-5fe1-bde9-d01e4810702a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-37015 vulnerable 2026-06-08 05:46:08.330357 Details available
Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-05-01T18:23:14.069Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5839 vulnerable 2026-06-08 05:26:43.956575 Details available
Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.
Published: 2020-07-08T15:08:54.000Z
Updated: 2024-08-04T08:39:25.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12593 vulnerable 2026-06-08 05:17:58.619278 Details available
Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.
Published: 2020-11-18T22:40:41.000Z
Updated: 2024-08-04T11:56:52.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19547 vulnerable 2026-06-08 05:13:23.070540 Details available
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
Published: 2020-01-13T15:10:46.000Z
Updated: 2024-08-05T02:16:48.469Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.