6.1
CVE-2014-3439
- EPSS 5.84%
- Veröffentlicht 07.11.2014 11:55:03
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secure@symantec.com
- CVE-Watchlists
- Unerledigt
LoginConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Endpoint Protection Manager Version <= 12.1.4
Symantec ≫ Endpoint Protection Manager Version12.1.0
Symantec ≫ Endpoint Protection Manager Version12.1.1
Symantec ≫ Endpoint Protection Manager Version12.1.2
Symantec ≫ Endpoint Protection Manager Version12.1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.84% | 0.922 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 6.5 | 6.9 |
AV:A/AC:L/Au:N/C:N/I:N/A:C
|
http://seclists.org/fulldisclosure/2014/Nov/7
http://www.securityfocus.com/archive/1/533918/100/0/threaded
http://www.securitytracker.com/id/1031176
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00
http://www.securityfocus.com/bid/70845
https://exchange.xforce.ibmcloud.com/vulnerabilities/98527