Symantec Corporation Symantec Endpoint Protection vulnerabilities

5 vulnerabilities

Known vulnerabilities in Symantec Corporation Symantec Endpoint Protection, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2018-5236symantec corporationsymantec endpoint protection+1
EPSS score
1.07%
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events.8.8CVE-2018-5237symantec corporationsymantec endpoint protection+1
EPSS score
1.93%
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.5.5CVE-2017-13680symantec corporationsymantec endpoint protection+1
EPSS score
0.39%
Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system.7.8CVE-2017-13681symantec corporationsymantec endpoint protection+1
EPSS score
0.43%
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.7.1CVE-2017-6331symantec corporationsymantec endpoint protection+1
EPSS score
1.69%
Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients.