Symantec Endpoint Protection Cloud vulnerabilities

7 CVEs affecting Symantec Endpoint Protection Cloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5311, published 2020-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5309, published 2017-04-14. Medium severity, CVSS 5.5. EPSS: 6.9% chance of exploitation in the next 30 days. The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec…
CVE-2016-5310, published 2017-04-14. Medium severity, CVSS 5.5. EPSS: 5.3% chance of exploitation in the next 30 days. The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec…
CVE-2018-18369, published 2019-04-25. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading…
CVE-2016-5311, published 2020-01-09. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint…
CVE-2018-12239, published 2018-11-29. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000;…
CVE-2018-12238, published 2018-11-29. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000;…
CVE-2018-18366, published 2019-04-25. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22,…