CVE-2013-5014: symantec endpoint_protection_manager
Vulnerability summary
CVE-2013-5014 is a high (CVSS 7.5) vulnerability in symantec endpoint_protection_manager. EPSS estimates a 67.57% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 14-02-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
67.57%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 67.57% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundSymantec Endpoint Protection Manager - Remote Command Execution (Metasploit)
Maturity: weaponized
Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution
Maturity: weaponized
Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution
exploit/windows/antivirus/symantec_endpoint_manager_rce
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec2 products
- endpoint_protection_manager11.0 | 12.1.0 | 12.1.1 | 12.1.2 | 12.1.3
- protection_center12.0
1 vendor · 2 products
References
5 links- www.sec-consult.com/fxdata/…X Refsource MISC