Symantec Enterprise Security Manager vulnerabilities

4 CVEs affecting Symantec Enterprise Security Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4350, published 2012-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-2375, published 2007-04-30. High severity, CVSS 10.0. EPSS: 5.4% chance of exploitation in the next 30 days. The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code…
CVE-2006-4314, published 2006-08-23. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) via a malformed ESM agent request.
CVE-2007-2896, published 2007-05-30. Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days. Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and…
CVE-2012-4350, published 2012-12-18. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via…