https://vulnogram.org/ Most recent CVEs assigned by Symantec - A Division of Broadcom (symantec). https://vulnogram.org/seaview/icons/symantec.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-19810 https://vulnogram.org/CVE-2026-19810 Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context… Medium Tue, 13 Oct 2026 20:03:05 GMT https://vulnogram.org/CVE-2026-15380 https://vulnogram.org/CVE-2026-15380 A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3) Medium Fri, 17 Jul 2026 06:57:17 GMT https://vulnogram.org/CVE-2026-15379 https://vulnogram.org/CVE-2026-15379 The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the… Medium Fri, 17 Jul 2026 06:47:42 GMT https://vulnogram.org/CVE-2026-11626 https://vulnogram.org/CVE-2026-11626 CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to g… Medium Wed, 10 Jun 2026 18:47:21 GMT https://vulnogram.org/CVE-2026-11815 https://vulnogram.org/CVE-2026-11815 An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution. Medium Wed, 10 Jun 2026 06:39:26 GMT https://vulnogram.org/CVE-2026-3991 https://vulnogram.org/CVE-2026-3991 Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to… High Mon, 30 Mar 2026 18:27:31 GMT https://vulnogram.org/CVE-2026-3862 https://vulnogram.org/CVE-2026-3862 Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page. Medium Tue, 10 Mar 2026 14:52:52 GMT https://vulnogram.org/CVE-2025-13919 https://vulnogram.org/CVE-2025-13919 Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a COM Hijacking vulnerability, which is a type of issue whereby an attacker attempts to establish persistence and evade detection by hijacki… Medium Wed, 28 Jan 2026 16:41:02 GMT https://vulnogram.org/CVE-2025-13918 https://vulnogram.org/CVE-2025-13918 Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to g… Medium Wed, 28 Jan 2026 16:35:43 GMT https://vulnogram.org/CVE-2025-13917 https://vulnogram.org/CVE-2025-13917 WSS Agent, prior to 9.8.5, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected… High Wed, 28 Jan 2026 16:29:59 GMT https://vulnogram.org/CVE-2025-10847 https://vulnogram.org/CVE-2025-10847 DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system. High Network Exploitable Wed, 01 Oct 2025 10:48:12 GMT https://vulnogram.org/CVE-2025-9059 https://vulnogram.org/CVE-2025-9059 The Altiris Core Agent Updater package (AeXNSC.exe) is prone to an elevation of privileges vulnerability through DLL hijacking. High Thu, 11 Sep 2025 05:18:13 GMT https://vulnogram.org/CVE-2025-8661 https://vulnogram.org/CVE-2025-8661 A stored Cross-Site Scripting vulnerability (XSS) occurs when the server does not properly validate or encode the data entered by the user. Medium Mon, 11 Aug 2025 07:52:39 GMT https://vulnogram.org/CVE-2025-8660 https://vulnogram.org/CVE-2025-8660 Privilege escalation occurs when a user gets access to more resources or functionality than they are normally allowed. Medium Mon, 11 Aug 2025 07:18:08 GMT https://vulnogram.org/CVE-2025-24508 https://vulnogram.org/CVE-2025-24508 Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage Medium Mon, 07 Jul 2025 04:54:31 GMT https://vulnogram.org/CVE-2025-5333 https://vulnogram.org/CVE-2025-5333 Remote attackers can execute arbitrary code in the context of the vulnerable service process. Critical Network Exploitable Sun, 06 Jul 2025 13:50:25 GMT https://vulnogram.org/CVE-2025-3599 https://vulnogram.org/CVE-2025-3599 Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or… Medium Network Exploitable Wed, 30 Apr 2025 16:49:18 GMT https://vulnogram.org/CVE-2024-11035 https://vulnogram.org/CVE-2024-11035 Carbon Black Cloud Windows Sensor, prior to 4.0.3, may be susceptible to an Information Leak vulnerability, which s a type of issue whereby sensitive information may b exposed due to a vulnerability in software. Low Wed, 05 Mar 2025 16:56:53 GMT https://vulnogram.org/CVE-2025-0893 https://vulnogram.org/CVE-2025-0893 Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability. High Wed, 19 Feb 2025 17:56:19 GMT https://vulnogram.org/CVE-2025-24507 https://vulnogram.org/CVE-2025-24507 This vulnerability allows appliance compromise at boot time. High Thu, 30 Jan 2025 18:41:50 GMT https://vulnogram.org/CVE-2025-24506 https://vulnogram.org/CVE-2025-24506 A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types. Medium Thu, 30 Jan 2025 18:39:19 GMT https://vulnogram.org/CVE-2025-24505 https://vulnogram.org/CVE-2025-24505 This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file. High Thu, 30 Jan 2025 18:36:09 GMT https://vulnogram.org/CVE-2025-24504 https://vulnogram.org/CVE-2025-24504 An improper input validation the CSRF filter results in unsanitized user input written to the application logs. Medium Thu, 30 Jan 2025 18:31:41 GMT https://vulnogram.org/CVE-2025-24503 https://vulnogram.org/CVE-2025-24503 A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server. Critical Thu, 30 Jan 2025 18:27:08 GMT https://vulnogram.org/CVE-2025-24502 https://vulnogram.org/CVE-2025-24502 An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address. Medium Thu, 30 Jan 2025 18:24:32 GMT https://vulnogram.org/CVE-2025-24501 https://vulnogram.org/CVE-2025-24501 An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request. Medium Thu, 30 Jan 2025 18:21:37 GMT https://vulnogram.org/CVE-2025-24500 https://vulnogram.org/CVE-2025-24500 The vulnerability allows an unauthenticated attacker to access information in PAM database. High Thu, 30 Jan 2025 18:15:12 GMT https://vulnogram.org/CVE-2024-38499 https://vulnogram.org/CVE-2024-38499 CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access the critical encryption keys which further causes the exploitation of stored credentials. Thi… High Tue, 17 Dec 2024 05:43:00 GMT https://vulnogram.org/CVE-2024-38496 https://vulnogram.org/CVE-2024-38496 The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships. Medium Mon, 15 Jul 2024 14:16:57 GMT https://vulnogram.org/CVE-2024-38495 https://vulnogram.org/CVE-2024-38495 A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database. Medium Mon, 15 Jul 2024 14:13:12 GMT https://vulnogram.org/CVE-2024-38494 https://vulnogram.org/CVE-2024-38494 This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request. High Mon, 15 Jul 2024 14:03:53 GMT https://vulnogram.org/CVE-2024-38493 https://vulnogram.org/CVE-2024-38493 A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side co… Medium Mon, 15 Jul 2024 14:00:15 GMT https://vulnogram.org/CVE-2024-38492 https://vulnogram.org/CVE-2024-38492 This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file. Critical Mon, 15 Jul 2024 13:54:38 GMT https://vulnogram.org/CVE-2024-38491 https://vulnogram.org/CVE-2024-38491 The vulnerability allows an unauthenticated attacker to read arbitrary information from the database. High Mon, 15 Jul 2024 13:50:52 GMT https://vulnogram.org/CVE-2024-36458 https://vulnogram.org/CVE-2024-36458 The vulnerability allows a malicious low-privileged PAM user to perform server upgrade related actions. Medium Mon, 15 Jul 2024 13:43:53 GMT https://vulnogram.org/CVE-2024-36457 https://vulnogram.org/CVE-2024-36457 The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint. Medium Mon, 15 Jul 2024 13:39:19 GMT https://vulnogram.org/CVE-2024-36456 https://vulnogram.org/CVE-2024-36456 This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file. Critical Mon, 15 Jul 2024 13:31:44 GMT https://vulnogram.org/CVE-2024-36455 https://vulnogram.org/CVE-2024-36455 An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request. Critical Mon, 15 Jul 2024 13:19:41 GMT https://vulnogram.org/CVE-2024-36459 https://vulnogram.org/CVE-2024-36459 A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a… High Network Exploitable Fri, 14 Jun 2024 12:06:19 GMT https://vulnogram.org/CVE-2023-23958 https://vulnogram.org/CVE-2023-23958 Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability. Medium Tue, 26 Sep 2023 21:51:02 GMT https://vulnogram.org/CVE-2023-23957 https://vulnogram.org/CVE-2023-23957 An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4 Tue, 19 Sep 2023 12:30:39 GMT https://vulnogram.org/CVE-2023-23955 https://vulnogram.org/CVE-2023-23955 Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability. High Thu, 01 Jun 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23954 https://vulnogram.org/CVE-2023-23954 Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability. Medium Thu, 01 Jun 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23953 https://vulnogram.org/CVE-2023-23953 Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability. High Thu, 01 Jun 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23952 https://vulnogram.org/CVE-2023-23952 Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability. Critical Network Exploitable Thu, 01 Jun 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23956 https://vulnogram.org/CVE-2023-23956 A user can supply malicious HTML and JavaScript code that will be executed in the client browser Medium Network Exploitable Tue, 30 May 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23951 https://vulnogram.org/CVE-2023-23951 Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application Medium Network Exploitable Tue, 24 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23950 https://vulnogram.org/CVE-2023-23950 User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses. Medium Network Exploitable Tue, 24 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2023-23949 https://vulnogram.org/CVE-2023-23949 An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser. High Network Exploitable Tue, 24 Jan 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-25631 https://vulnogram.org/CVE-2022-25631 Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated High Fri, 20 Jan 2023 00:00:00 GMT