Symantec Endpoint Protection Cloud Agent vulnerabilities

2 CVEs affecting Symantec Endpoint Protection Cloud Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-18366, published 2019-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-18369, published 2019-04-25. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading…
CVE-2018-18366, published 2019-04-25. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22,…