Broadcom Symantec Endpoint Protection vulnerabilities

3 CVEs affecting Broadcom Symantec Endpoint Protection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-25631, published 2023-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-37017, published 2022-12-01. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a…
CVE-2022-37016, published 2022-12-01. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software…
CVE-2022-25631, published 2023-01-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise…