Symantec Data Center Security vulnerabilities

6 CVEs affecting Symantec Data Center Security, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-5832, published 2020-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-9225, published 2015-01-21. Medium severity, CVSS 4.0. EPSS: 9.2% chance of exploitation in the next 30 days. The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows…
CVE-2014-9224, published 2015-01-21. Low severity, CVSS 3.5. EPSS: 4.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec…
CVE-2014-7289, published 2015-01-21. Medium severity, CVSS 6.5. EPSS: 4.6% chance of exploitation in the next 30 days. SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1…
CVE-2014-3440, published 2015-01-21. High severity, CVSS 9.0. EPSS: 3.3% chance of exploitation in the next 30 days. The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1…
CVE-2014-9226, published 2015-01-21. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass…
CVE-2020-5832, published 2020-04-06. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to…