Symantec It Management Suite vulnerabilities

3 CVEs affecting Symantec It Management Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6588, published 2020-01-08.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-6589, published 2020-01-08. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.
• CVE-2016-6588, published 2020-01-08. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0.
• CVE-2016-6590, published 2020-01-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution…