Symantec Deployment Solution vulnerabilities

2 CVEs affecting Symantec Deployment Solution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5689, published 2015-09-20.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-5689, published 2015-09-20. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs improper…
• CVE-2014-7286, published 2014-12-22. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.