7.2
CVE-2012-4348
- EPSS 0.72%
- Published 18.12.2012 20:55:01
- Last modified 11.04.2025 00:51:21
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Endpoint Protection Version11.0
Symantec ≫ Endpoint Protection Version11.0 Updateru5
Symantec ≫ Endpoint Protection Version11.0 Updateru6
Symantec ≫ Endpoint Protection Version11.0 Updateru6a
Symantec ≫ Endpoint Protection Version11.0 Updateru6mp1
Symantec ≫ Endpoint Protection Version11.0 Updateru6mp2
Symantec ≫ Endpoint Protection Version11.0.1
Symantec ≫ Endpoint Protection Version11.0.1 Updatemp1
Symantec ≫ Endpoint Protection Version11.0.1 Updatemp2
Symantec ≫ Endpoint Protection Version11.0.2
Symantec ≫ Endpoint Protection Version11.0.2 Updatemp1
Symantec ≫ Endpoint Protection Version11.0.2 Updatemp2
Symantec ≫ Endpoint Protection Version11.0.4
Symantec ≫ Endpoint Protection Version11.0.4 Updatemp1a
Symantec ≫ Endpoint Protection Version11.0.4 Updatemp2
Symantec ≫ Endpoint Protection Version11.0.3001
Symantec ≫ Endpoint Protection Version11.0.6000
Symantec ≫ Endpoint Protection Version11.0.6100
Symantec ≫ Endpoint Protection Version11.0.6200
Symantec ≫ Endpoint Protection Version11.0.6200.754
Symantec ≫ Endpoint Protection Version11.0.6300
Symantec ≫ Endpoint Protection Version11.0.7000
Symantec ≫ Endpoint Protection Version11.0.7100
Symantec ≫ Endpoint Protection Version12.1
Symantec ≫ Endpoint Protection Version12.1.671
Symantec ≫ Endpoint Protection Version12.1.1000
Symantec ≫ Endpoint Protection Version12.0 Update- Editionsmall_business
Symantec ≫ Endpoint Protection Version12.1 Update- Editionsmall_business
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.72% | 0.716 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 4.1 | 10 |
AV:A/AC:L/Au:M/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.