CVE-2019-12756: Symantec Endpoint Protection

Low severity, CVSS 2.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Symantec Endpoint Protection (SEP), prior to 14.2 RU2 may be susceptible to a password protection bypass vulnerability whereby the secondary layer of password protection could by bypassed for individuals with local administrator rights.

Affected products

• Symantec Endpoint Protection: version 11.0 only; version 12.1 only; version 14.0.0 only; version 14.0.1 only; version 14.2 only

Published 2019-11-15. Last modified 2026-06-17.