Broadcom Symantec Embedded Security Critical System Protection vulnerabilities

4 CVEs affecting Broadcom Symantec Embedded Security Critical System Protection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8800, published 2016-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8799, published 2016-06-08. High severity, CVSS 7.6. EPSS: 5.3% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for…
CVE-2015-8798, published 2016-06-08. High severity, CVSS 8.0. EPSS: 2.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for…
CVE-2015-8157, published 2016-06-08. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for…
CVE-2015-8800, published 2016-06-08. High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days. Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical…