Vulnerabilidades em Symantec Corporation

71 resultados
Análise Vexday

O histórico de vulnerabilidades da Symantec Corporation reúne 71 CVEs catalogadas, com taxa de exploração ativa que supera em 3,1 vezes a média geral do catálogo CISA KEV — sinal relevante considerando o volume relativamente modesto de entradas. A CVE em exploração confirmada atualmente é a CVE-2017-6327, com escore EPSS de 0,3534, indicando probabilidade não trivial de tentativas de exploração em ambientes reais. Chama atenção ainda que 7 CVEs possuem prova de conceito pública disponível, o que reduz a barreira técnica para agentes maliciosos, e que o maior EPSS observado no portfólio atinge 0,7276 — valor elevado que merece priorização imediata de análise. O tipo de falha mais recorrente é CWE-77 (injeção de comandos), padrão que costuma habilitar execução arbitrária de código e deve orientar revisões de configuração e controles de entrada em produtos legados da fabricante.

CVE-2017-6326—The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtainEPSS 72.8%CVE-2017-6327HIGHThe Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an indEPSS 35.3%KEVCVE-2018-5234—The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is executEPSS 16.7%CVE-2016-9091—Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS comEPSS 10.1%CVE-2017-13677—Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can uEPSS 5.2%CVE-2016-10258—Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance EPSS 4.9%CVE-2018-5241—Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerabilEPSS 4.6%CVE-2018-12242—The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue thatEPSS 3.0%CVE-2018-12237—The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authEPSS 2.7%CVE-2017-6325—The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found toEPSS 2.5%CVE-2018-18369—Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.EPSS 2.4%CVE-2017-15531—Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interfaEPSS 2.4%CVE-2016-9097—The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 pEPSS 2.4%CVE-2017-6328—The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and isEPSS 2.1%CVE-2018-5237—Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a tEPSS 2.0%CVE-2017-15533—Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the BleicheEPSS 1.9%CVE-2016-9099—Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6EPSS 1.8%CVE-2018-5243—The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploiEPSS 1.8%CVE-2017-6331—Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that EPSS 1.7%CVE-2018-18367—Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL PreloadingEPSS 1.7%