Broadcom Symantec Data Center Security Server vulnerabilities

7 CVEs affecting Broadcom Symantec Data Center Security Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-23617, published 2024-01-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5309, published 2017-04-14. Medium severity, CVSS 5.5. EPSS: 6.9% chance of exploitation in the next 30 days. The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec…
CVE-2016-5310, published 2017-04-14. Medium severity, CVSS 5.5. EPSS: 5.3% chance of exploitation in the next 30 days. The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec…
CVE-2015-8799, published 2016-06-08. High severity, CVSS 7.6. EPSS: 5.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for…
CVE-2015-8798, published 2016-06-08. High severity, CVSS 8.0. EPSS: 2.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for…
CVE-2024-23617, published 2024-01-26. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a…
CVE-2015-8157, published 2016-06-08. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for…
CVE-2015-8800, published 2016-06-08. High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days. Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical…