CVE-2014-3438
Symantec Endpoint Protection Manager < 12.1 RU5 - Cross-Site Scripting
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-3438.
AI-analyzed exploit summary The document provides a detailed technical analysis of multiple vulnerabilities in Symantec Endpoint Protection, including XXE, XSS, and arbitrary file write/overwrite flaws. It includes proof-of-concept examples and exploitation scenarios, demonstrating a deep understanding of the vulnerabilities.
Description
Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploits (1)
The document provides a detailed technical analysis of multiple vulnerabilities in Symantec Endpoint Protection, including XXE, XSS, and arbitrary file write/overwrite flaws. It includes proof-of-concept examples and exploitation scenarios, demonstrating a deep understanding of the vulnerabilities.