Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• symantec endpoint protection11.0
• symantec endpoint protection12.1
• symantec endpoint protection14
• symantec endpoint protection14.0.0
• symantec endpoint protection14.0.1
• symantec endpoint protection14.2
• symantec endpoint protectionnis-22.15.2.22
• symantec endpoint protectionsep-12.1.7484.7002
• symantec endpoint protection cloudbefore 22.16.3
• symantec endpoint protection cloud agentbefore 3.00.31.2817
• symantec norton securitybefore 22.16.3

Versions reported by the vendor

Affected version ranges reported by the assigning authority (symantec). Independent of NVD's CPE analysis and usually ahead of it.

• Symantec Corporation Norton Security

  • Prior to 22.16.3affected

• Symantec Corporation SEP (Windows client)

  • Prior to and including 12.1 RU6 MP9, Prior to 14.2 RU1affected

• Symantec Corporation SEP Cloud

  • Prior to 22.16.3affected

• Symantec Corporation SEP SBE

  • Prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002affected

Other highest-scoring records for the same primary product.

• CVE-2012-0295The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to cond
  38Monitor
• CVE-2018-5237Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a t
  36Monitor
• CVE-2018-18369Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.
  32Monitor
• CVE-2010-0114fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allow
  32Monitor
• CVE-2020-5837Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links,
  31Monitor
• CVE-2020-5836Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's
  31Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.