Symantec Data Center Security Server Vulnerabilities (7 CVEs)

CVE-2024-23617 Jan 26, 00:15 HIGH This Week

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Broadcom Symantec Data Center Security Server

NVD

CVSS 3.1

8.8

EPSS

1.7%

CVE-2016-5310 Apr 14, 18:59 MEDIUM POC This Month

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Microsoft Broadcom +16

NVD Exploit-DB

CVSS 3.1

5.5

EPSS

8.0%

CVE-2016-5309 Apr 14, 18:59 MEDIUM POC This Month

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Microsoft Broadcom +16

NVD Exploit-DB

CVSS 3.1

5.5

EPSS

8.0%

CVE-2015-8800 Jun 08, 14:59 HIGH This Week

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection Broadcom Symantec Critical System Protection Symantec Data Center Security Server Symantec Data Center Security Server And Agents +2

NVD

CVSS 3.1

7.3

EPSS

0.4%

CVE-2015-8799 Jun 08, 14:59 HIGH This Week

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for. Rated high severity (CVSS 7.6). No vendor patch available.

Path Traversal Broadcom Symantec Critical System Protection Symantec Data Center Security Server Symantec Data Center Security Server And Agents +2

NVD

CVSS 3.1

7.6

EPSS

1.4%

CVE-2015-8798 Jun 08, 14:59 HIGH This Week

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

RCE Path Traversal Broadcom Symantec Critical System Protection Symantec Data Center Security Server +3

NVD

CVSS 3.1

8.0

EPSS

2.9%

CVE-2015-8157 Jun 08, 14:59 HIGH This Week

SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Broadcom Symantec Critical System Protection Symantec Data Center Security Server Symantec Data Center Security Server And Agents +2

NVD

CVSS 3.1

8.8

EPSS

0.4%

Symantec Data Center Security Server

Monthly