GCVE - cpe:2.3:a:symantec:im_manager:8.4.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:im_manager:8.4.15:*:*:*:*:*:*:*

part: a version: 8.4.15 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Im Manager (`3a240d62-7124-5919-b44b-e2e75795e866`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0554`	vulnerable	2026-06-08 04:56:37.834334	Details available The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue." Published: 2011-10-02T01:00:00.000Z Updated: 2024-08-06T21:58:25.854Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/49742 http://securitytracker.com/id?1026130 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00 http://secunia.com/advisories/43157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0553`	vulnerable	2026-06-08 04:56:37.833623	Details available SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2011-10-02T01:00:00.000Z Updated: 2024-08-06T21:58:25.166Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/49738 http://securitytracker.com/id?1026130 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00 http://secunia.com/advisories/43157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0552`	vulnerable	2026-06-08 04:56:37.832348	Details available Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the (1) refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the (2) nav or (3) menuitem parameter to IMManager/Admin/IMAdminTOC_simple.asp, or the (4) action parameter to IMManager/Admin/IMAdminEdituser.asp. Published: 2011-10-02T01:00:00.000Z Updated: 2024-08-06T21:58:25.058Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/49739 http://securitytracker.com/id?1026130 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00 http://secunia.com/advisories/43157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3719`	vulnerable	2026-06-08 04:55:16.629823	Details available Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method. Published: 2011-02-02T00:00:00.000Z Updated: 2024-08-07T03:18:53.031Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-11-037 http://www.securityfocus.com/archive/1/516103/100/0/threaded http://www.securityfocus.com/bid/45946 https://exchange.xforce.ibmcloud.com/vulnerabilities/65040 http://secunia.com/advisories/43143	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.