symantec endpoint protection manager

Name: symantec endpoint protection manager
Brand: symantec

productUS

cpe:2.3:a:symantec:endpoint_protection_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical20high14medium7low

updated 2026-10-28

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-1486US	high7.5	68.3% (99th)	Exploit	no fix	2015-08-01	= 12.1.0
CVE-2013-5014US	high7.5	67.6% (99th)	Exploit	no fix	2014-02-14	5 versions
CVE-2015-1487US	medium5.5	52.0% (99th)	Exploit	no fix	2015-08-01	= 12.1.0
CVE-2013-5015US	medium6.5	28.8% (98th)	Exploit	no fix	2014-02-14	5 versions
CVE-2015-1489US	high8.5	25.4% (98th)	Exploit	no fix	2015-08-01	= 12.1.0
CVE-2014-3437US	high7.5	8.54% (95th)	Exploit	no fix	2014-11-07	5 versions
CVE-2014-3439US	medium6.1	5.84% (93rd)	Exploit	no fix	2014-11-07	5 versions
CVE-2013-1612US	high7.9	4.38% (91st)	Exploit	no fix	2013-06-20	3 versions
CVE-2016-5304US	medium6.8	4.12% (91st)	Exploit	no fix	2016-06-30	≤ 12.1.6
CVE-2014-3438US	medium4.3	3.92% (90th)	Exploit	no fix	2014-11-07	5 versions
CVE-2016-3652US	medium5.4	2.55% (85th)	Exploit	no fix	2016-06-30	≤ 12.1.6
CVE-2016-3653US	high8.0	1.34% (71st)	Exploit	no fix	2016-06-30	≤ 12.1.6
CVE-2018-18368US	high7.8	0.58% (48th)	Exploit	no fix	2019-11-15	≤ 14.2
CVE-2015-8154US	high8.8	5.01% (92nd)	—	no fix	2016-03-18	≤ 12.1
CVE-2015-8153US	high8.8	3.08% (88th)	—	no fix	2016-03-18	≤ 12.1
CVE-2016-5307US	medium4.3	2.91% (87th)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2015-6555US	high8.5	2.78% (86th)	—	no fix	2015-11-12	≤ 12.1
CVE-2015-6554US	high7.5	2.73% (86th)	—	no fix	2015-11-12	≤ 12.1
CVE-2015-1490US	medium5.5	2.40% (84th)	—	no fix	2015-08-01	= 12.1.0
CVE-2016-3648US	high8.8	2.33% (83rd)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2016-5306US	medium5.3	2.08% (81st)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2016-3647US	high7.7	1.85% (79th)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2016-3651US	high8.0	1.85% (79th)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2015-1488US	medium4.0	1.83% (79th)	—	no fix	2015-08-01	= 12.1.0
CVE-2015-1492US	high8.5	1.74% (78th)	—	no fix	2015-08-01	= 12.1.0
CVE-2015-8152US	high8.0	1.72% (77th)	—	no fix	2016-03-18	≤ 12.1
CVE-2020-5834US	medium5.3	1.69% (77th)	—	14.3	2020-05-11	< 14.3
CVE-2018-18367US	high7.8	1.66% (76th)	—	no fix	2019-04-25	5 versions
CVE-2016-3649US	medium4.3	1.66% (76th)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2015-1491US	medium6.0	1.64% (76th)	—	no fix	2015-08-01	= 12.1.0
CVE-2016-3650US	high8.8	1.50% (74th)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2016-5305US	medium5.4	1.23% (69th)	—	no fix	2016-06-30	≤ 12.1.6
CVE-2019-12759US	high7.8	0.48% (42nd)	—	no fix	2019-11-15	2 versions
CVE-2020-5833US	low3.3	0.36% (30th)	—	14.3	2020-05-11	< 14.3
CVE-2020-5831US	low3.3	0.35% (29th)	—	14.2	2020-02-11	2 versions
CVE-2020-5830US	low3.3	0.35% (29th)	—	14.2	2020-02-11	2 versions
CVE-2020-5829US	low3.3	0.35% (29th)	—	14.2	2020-02-11	2 versions
CVE-2020-5828US	low3.3	0.35% (29th)	—	14.2	2020-02-11	2 versions
CVE-2020-5827US	low3.3	0.35% (29th)	—	14.2	2020-02-11	2 versions
CVE-2020-5835US	high7.0	0.32% (24th)	—	14.3	2020-05-11	< 14.3
CVE-2015-8801US	low2.9	0.27% (18th)	—	no fix	2016-06-30	≤ 12.1.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-254CWE-2544 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan