Symantec Security Information Manager vulnerabilities

4 CVEs affecting Symantec Security Information Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1615, published 2013-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1614, published 2013-07-08. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allow…
CVE-2013-1613, published 2013-07-08. Medium severity, CVSS 4.7. EPSS: 1.5% chance of exploitation in the next 30 days. SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users…
CVE-2013-1615, published 2013-07-08. Low severity, CVSS 2.9. EPSS: 0.8% chance of exploitation in the next 30 days. The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via…
CVE-2006-3072, published 2006-06-19. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code…