Symantec Vulnerabilities and Affected Products
Vulnerabilities associated with Endpoint Detection and Response (SEDR).
Products
Clear product- IT Management Suite3 vulnerabilities
- Norton Mobile Security for Android3 vulnerabilities
- Endpoint Encryption2 vulnerabilities
- endpoint_protection_manager2 vulnerabilities
- Messaging Gateway2 vulnerabilities
- Symantec Messaging Gateway2 vulnerabilities
- Carbon Black Cloud Windows Sensor1 vulnerability
- Critical System Protection (CSP)1 vulnerability
- Data Loss Prevention1 vulnerability
- Deployment Solution1 vulnerability
- Encryption Desktop1 vulnerability
- Endpoint Detection and Response (SEDR)1 vulnerability
- Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client1 vulnerability
- Ghost Solution Suite1 vulnerability
- Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 3601 vulnerability
- Norton App Lock1 vulnerability
- Norton AppLock1 vulnerability
- Norton Download Manager1 vulnerability
- Norton Power Eraser1 vulnerability
- PC Tools Internet Security1 vulnerability
- Server Management Suite1 vulnerability
- server_management_suite1 vulnerability
- SONAR Component1 vulnerability
- Symantec Diagnostic Tool1 vulnerability
- Symantec Endpoint Encryption1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-19547MEDIUM | Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy. CWE-79Jan 13, 2020 | CVSS6.1v3.1 | EPSS1.38% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |