CVE-2018-18367: symantec corporation symantec endpoint protection manager Untrusted Search Path
Vulnerability summary
CVE-2018-18367 is a high (CVSS 7.8) Untrusted Search Path vulnerability in symantec corporation symantec endpoint protection manager. EPSS estimates a 1.66% chance of exploitation in the next 30 days, higher than 76.1% of scored vulnerabilities.
Timeline
- 25-04-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.66%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.66% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Symantec1 product
- endpoint_protection_manager12.1:rtm | 12.1:ru1 | 12.1:ru1-mp1 | 12.1:ru2 | 12.1:ru2-mp1 | 12.1:ru3 | 12.1:ru4 | 12.1:ru4-mp1 | 12.1:ru4-mp1a | 12.1:ru4-mp1b | 12.1:ru4a | 12.1:ru5 | 12.1:ru6 | 12.1:ru6-mp1 | 12.1:ru6-mp1a | 12.1:ru6-mp2 | 12.1:ru6-mp3 | 12.1:ru6-mp4 | 12.1:ru6-mp5 | 12.1:ru6-mp6 | 12.1:ru6-mp7 | 12.1:ru6-mp8 | 12.1:ru6-mp9 | 14 | 14:mp1 | 14:mp2 | 14.0.1 | 14.0.1:mp1 | 14.0.1:mp2 | 14.1 | 14.2 | 14.2:mp1
Symantec corporation1 product
- symantec endpoint protection managerPrior to and including 12.1 RU6 MP9 | Prior to 14.2 RU1
2 vendors · 2 products