Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*

part: a version: 11.0 update: ru6mp1

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductEndpoint Protection (1caa4441-9002-5822-8157-a8ed6435f3ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5011 vulnerable 2026-06-08 05:04:50.590813 Details available
Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-08-06T16:59:41.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5010 vulnerable 2026-06-08 05:04:50.589617 Details available
The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-08-06T16:59:41.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5009 vulnerable 2026-06-08 05:04:50.574810 Details available
The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.
Published: 2014-01-10T16:00:00.000Z
Updated: 2024-08-06T16:59:41.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4348 vulnerable 2026-06-08 05:02:17.082634 Details available
The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Published: 2012-12-18T20:00:00.000Z
Updated: 2024-08-06T20:35:09.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3268 vulnerable 2026-06-08 04:55:13.832800 Details available
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
Published: 2010-12-22T20:00:00.000Z
Updated: 2024-08-07T03:03:18.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0114 vulnerable 2026-06-08 04:51:53.034092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.