CVE-2014-9225: broadcom symantec_critical_system_protection
Vulnerability summary
CVE-2014-9225 is a medium (CVSS 4.0) vulnerability in broadcom symantec_critical_system_protection. EPSS estimates a 9.22% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 21-01-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
9.22%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 9.22% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundSymantec Data Center Security - Multiple Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Broadcom1 product
Symantec1 product
- data_center_security6.0.0
2 vendors · 2 products