Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:endpoint_protection_manager:12.1.3:*:*:*:*:*:*:*

part: a version: 12.1.3 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductEndpoint Protection Manager (9e18c6c8-d00a-5660-ba84-141e844a136f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3439 vulnerable 2026-06-08 05:05:32.657524 Details available
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors.
Published: 2014-11-07T11:00:00.000Z
Updated: 2024-08-06T10:43:06.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3438 vulnerable 2026-06-08 05:05:32.657078 Details available
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-11-07T11:00:00.000Z
Updated: 2024-08-06T10:43:06.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3437 vulnerable 2026-06-08 05:05:32.656431 Details available
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-11-07T11:00:00.000Z
Updated: 2024-08-06T10:43:06.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5015 vulnerable 2026-06-08 05:04:50.602713 Details available
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Published: 2014-02-14T02:00:00.000Z
Updated: 2024-08-06T16:59:41.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5014 vulnerable 2026-06-08 05:04:50.601159 Details available
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-02-14T02:00:00.000Z
Updated: 2024-08-06T16:59:41.410Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.