Symantec Encryption Management Server vulnerabilities

9 CVEs affecting Symantec Encryption Management Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5243, published 2018-08-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-7288, published 2015-02-01. High severity, CVSS 9.0. EPSS: 8.1% chance of exploitation in the next 30 days. Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a…
CVE-2018-5243, published 2018-08-20. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator…
CVE-2015-8149, published 2016-02-18. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory corruption and service outage) via crafted…
CVE-2015-8151, published 2016-02-18. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access.
CVE-2015-8148, published 2016-02-18. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.
CVE-2014-7287, published 2015-02-01. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a…
CVE-2013-4674, published 2013-07-31. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote…
CVE-2014-1643, published 2014-02-07. Medium severity, CVSS 4.0. EPSS: 0.7% chance of exploitation in the next 30 days. The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of…
CVE-2015-8150, published 2016-02-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file.