CVE-2013-5015

MEDIUM 6.5CVE-2013-5015 · Published 14/02/2014 · updated 16/06/2026

Package	Affected versions	Patched versions
endpoint protection manager symantec	`= 11.0= 12.1.0= 12.1.1= 12.1.2= 12.1.3`	No fix yet
protection center symantec	`= 12.0`	No fix yet

Description

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References

osvdb.org/103306
exploit-db.com/exploits/31853
exploit-db.com/exploits/31917
securityfocus.com/bid/65467
symantec.com/security_response/securityupdates/detail.jsp · Vendor Advisory
sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free