Symantec Norton Password Manager vulnerabilities

4 CVEs affecting Symantec Norton Password Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-12755, published 2019-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-18365, published 2019-04-09. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Norton Password Manager may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network…
CVE-2018-12240, published 2018-08-29. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the…
CVE-2018-18362, published 2018-12-06. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject…
CVE-2019-12755, published 2019-09-17. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Norton Password Manager, prior to 6.5.0.2104, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an…