Symantec Discovery vulnerabilities

4 CVEs affecting Symantec Discovery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2950, published 2007-07-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1173, published 2007-05-16. High severity, CVSS 10.0. EPSS: 7.8% chance of exploitation in the next 30 days. Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2006 Feature Pack 1, (2) Numara Asset Manager 8.0, and (3) Symantec Discovery…
CVE-2007-2514, published 2007-06-06. High severity, CVSS 9.3. EPSS: 4.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, and (3) Centennial UK Ltd Discovery 2006 Feature Pack,…
CVE-2005-3316, published 2005-10-27. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain…
CVE-2007-2950, published 2007-07-23. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to…