GCVE - cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:*:*:*

part: a version: 12.1 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Endpoint Protection (`1caa4441-9002-5822-8157-a8ed6435f3ab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3434`	vulnerable	2026-06-08 05:05:32.648482	Details available Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call. Published: 2014-08-06T19:00:00.000Z Updated: 2024-08-06T10:43:06.117Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140804_00 http://www.osvdb.org/109663 http://www.securityfocus.com/bid/68946 https://exchange.xforce.ibmcloud.com/vulnerabilities/95062 http://www.kb.cert.org/vuls/id/252068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4348`	vulnerable	2026-06-08 05:02:17.095240	Details available The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors. Published: 2012-12-18T20:00:00.000Z Updated: 2024-08-06T20:35:09.115Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00 http://www.securityfocus.com/bid/56846 http://www.securitytracker.com/id?1027863	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0295`	vulnerable	2026-06-08 05:00:40.596413	Details available The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294. Published: 2012-05-23T21:00:00.000Z Updated: 2024-08-06T18:23:29.328Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 http://www.securityfocus.com/bid/53184 http://www.securityfocus.com/bid/53183 http://www.securitytracker.com/id?1027093	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0294`	vulnerable	2026-06-08 05:00:40.594788	Details available Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors. Published: 2012-05-23T21:00:00.000Z Updated: 2024-08-06T18:23:30.586Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 http://www.securityfocus.com/bid/53182 http://www.securitytracker.com/id?1027093	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.