Symantec Pgp Universal Server vulnerabilities

4 CVEs affecting Symantec Pgp Universal Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-7288, published 2015-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-7288, published 2015-02-01. High severity, CVSS 9.0. EPSS: 8.1% chance of exploitation in the next 30 days. Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a…
CVE-2014-7287, published 2015-02-01. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a…
CVE-2013-4674, published 2013-07-31. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote…
CVE-2012-3582, published 2012-09-04. Low severity, CVSS 2.9. EPSS: 0.6% chance of exploitation in the next 30 days. Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic…