Symantec Management Platform vulnerabilities

2 CVEs affecting Symantec Management Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5008, published 2013-10-10.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-3028, published 2011-03-07. Medium severity, CVSS 6.8. EPSS: 42.6% chance of exploitation in the next 30 days. The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x…
• CVE-2013-5008, published 2013-10-10. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across…