CVE-2014-9226: broadcom symantec_critical_system_protection
Vulnerability summary
CVE-2014-9226 is a high (CVSS 7.2) vulnerability in broadcom symantec_critical_system_protection. EPSS estimates a 1.54% chance of exploitation in the next 30 days, higher than 74.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 21-01-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.54%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
0.00 pp
From 1.54% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundSymantec Data Center Security - Multiple Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Broadcom1 product
Symantec1 product
- data_center_security6.0.0
2 vendors · 2 products