Broadcom Symantec Critical System Protection 5.2.9
Approved changes feed: RSS · Atom
cpe:2.3:a:broadcom:symantec_critical_system_protection:5.2.9:*:*:*:*:*:*:*
part: a version: 5.2.9 update: *
| Vendor | Broadcom (9814e701-1071-5d68-93ef-4536eaf59407) |
|---|---|
| Product | Symantec Critical System Protection (65832fcc-ab74-5432-88da-1826315ae467) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-8800 |
vulnerable | 2026-06-08 05:07:04.927358 |
Details available
Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allow remote authenticated users to conduct argument-injection attacks by leveraging certain named-pipe access.
Published: 2016-06-08T14:00:00.000Z
Updated: 2024-08-06T08:29:22.044Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9226 |
vulnerable | 2026-06-08 05:06:11.178840 |
Details available
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.
Published: 2015-01-21T11:00:00.000Z
Updated: 2024-08-06T13:40:23.891Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9225 |
vulnerable | 2026-06-08 05:06:11.178460 |
Details available
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.
Published: 2015-01-21T11:00:00.000Z
Updated: 2024-08-06T13:40:24.001Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9224 |
vulnerable | 2026-06-08 05:06:11.176963 |
Details available
Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-01-21T11:00:00.000Z
Updated: 2024-08-06T13:40:24.641Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7289 |
vulnerable | 2026-06-08 05:05:59.284799 |
Details available
SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
Published: 2015-01-21T11:00:00.000Z
Updated: 2024-08-06T12:47:32.494Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3440 |
vulnerable | 2026-06-08 05:05:32.660104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.