CVE-2018-5240: symantec corporation inventory plugin for symantec management agent
Vulnerability summary
CVE-2018-5240 is a high (CVSS 8.0) vulnerability in symantec corporation inventory plugin for symantec management agent. EPSS estimates a 1.10% chance of exploitation in the next 30 days, higher than 65% of scored vulnerabilities.
Timeline
- 25-07-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.10%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
0.00 pp
From 1.10% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec1 product
- inventory≤ 7.6 | 8.0:hf6 | 8.1:ru7
Symantec corporation1 product
- inventory plugin for symantec management agentPrior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7
2 vendors · 2 products