Symantec Protection For SharePoint Servers vulnerabilities

9 CVEs affecting Symantec Protection For SharePoint Servers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5310, published 2017-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2211, published 2016-06-30. High severity, CVSS 7.8. EPSS: 53.4% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3645, published 2016-06-30. Critical severity, CVSS 9.8. EPSS: 24.6% chance of exploitation in the next 30 days. Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2209, published 2016-06-30. High severity, CVSS 7.3. EPSS: 20.9% chance of exploitation in the next 30 days. Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;…
CVE-2016-2207, published 2016-06-30. High severity, CVSS 8.4. EPSS: 18.1% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3646, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3644, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-2210, published 2016-06-30. High severity, CVSS 7.3. EPSS: 11.4% chance of exploitation in the next 30 days. Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-5309, published 2017-04-14. Medium severity, CVSS 5.5. EPSS: 6.9% chance of exploitation in the next 30 days. The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec…
CVE-2016-5310, published 2017-04-14. Medium severity, CVSS 5.5. EPSS: 5.3% chance of exploitation in the next 30 days. The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec…