Symantec Management Center vulnerabilities

2 CVEs affecting Symantec Management Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18376, published 2020-04-10.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-9697, published 2019-08-30. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL…
• CVE-2019-18376, published 2020-04-10. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that intercepts/logs traffic to…