Symantec Management Console vulnerabilities

2 CVEs affecting Symantec Management Console, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6323, published 2018-04-16.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-15527, published 2017-11-20. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient security validation /…
• CVE-2017-6323, published 2018-04-16. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly…