Symantec Ghost Solution Suite vulnerabilities

2 CVEs affecting Symantec Ghost Solution Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6590, published 2020-01-08.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-18364, published 2019-02-08. High severity, CVSS 7.3. EPSS: 0.9% chance of exploitation in the next 30 days. Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected…
• CVE-2016-6590, published 2020-01-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution…