CVE-2013-5015 SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Bus...
MediumCVSS 6.5
EPSS 28.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec endpoint protection manager | = 11.0 | No fix listed |
| symantec endpoint protection manager | = 12.1.0 | No fix listed |
| symantec endpoint protection manager | = 12.1.1 | No fix listed |
| symantec endpoint protection manager | = 12.1.2 | No fix listed |
| symantec endpoint protection manager | = 12.1.3 | No fix listed |
| symantec protection center | = 12.0 | No fix listed |
References
- 103306 vdb-entry
- 31853 exploit
- 31917 exploit
- 65467 vdb-entry
- www.symantec.com vendor-advisory
- www.sec-consult.com