Symantec Management Center vulnerabilities
2 vulnerabilities
Known vulnerabilities in Symantec Management Center, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2019-9697symantec corporation · management center (mc) +1 moresymantec corporation management center (mc)An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL policy import servers that they might not otherwise be authorized to access.EPSS0.99%MediumCVE-2019-18376symantec · management_centersymantec management_centerA CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CSRF attacks against MC.EPSS0.72%