Symantec Data Loss Prevention vulnerabilities

4 CVEs affecting Symantec Data Loss Prevention, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9701, published 2019-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0548, published 2011-07-18. High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days. Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1,…
CVE-2014-9230, published 2015-06-28. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject arbitrary web…
CVE-2019-9701, published 2019-06-19. Medium severity, CVSS 4.8. EPSS: 1.7% chance of exploitation in the next 30 days. DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject client-side scripts into web pages viewed by…
CVE-2015-1485, published 2015-06-28. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the…