Symantec Security Analytics vulnerabilities

2 CVEs affecting Symantec Security Analytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30642, published 2021-04-27.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-30642, published 2021-04-27. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute…
• CVE-2018-12241, published 2018-11-27. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP…