Symantec Enterprise Firewall vulnerabilities

15 CVEs affecting Symantec Enterprise Firewall, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4422, published 2007-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1029, published 2005-03-01. High severity, CVSS 9.3. EPSS: 17% chance of exploitation in the next 30 days. The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data…
CVE-2002-1463, published 2003-06-09. High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days. Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial…
CVE-2004-0369, published 2004-12-31. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote…
CVE-2006-2341, published 2006-05-12. Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days. The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using…
CVE-2005-3768, published 2005-11-23. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products,…
CVE-2007-4422, published 2007-08-18. High severity, CVSS 9.3. EPSS: 2.6% chance of exploitation in the next 30 days. The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not a username is valid,…
CVE-2004-1754, published 2004-06-15. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or…
CVE-2002-1535, published 2003-03-31. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates…
CVE-2002-2294, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote…
CVE-2002-0990, published 2002-10-28. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of…

Latest

CVE-2005-0817, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to…
CVE-2003-0106, published 2003-04-02. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.