CVE-2022-37015: Symantec Endpoint Detection And Response

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected products

  • Symantec Endpoint Detection And Response: before 4.7.0 (fixed in 4.7.0)

Published 2022-11-08. Last modified 2026-06-17.