EDB-35915

PoC

Symantec Data Center Security - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor SEC Consultpublished 2015-01-26catalog exploit_db

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-9226US	high7.2	1.54% (75th)	Exploit	2015-01-21
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows loca…
CVE-2014-9225US	medium4.0	9.22% (95th)	Exploit	2015-01-21
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x thro…
CVE-2014-9224US	low3.5	4.59% (92nd)	Exploit	2015-01-21
Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 throug…
CVE-2014-7289US	medium6.5	4.55% (92nd)	Exploit	2015-01-21
SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.