PatchTheCVEsymantec vulnerabilities
Recent CVEs affecting symantec products. 5 tracked.
symantec has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-09-27. Highest priority: CVE-2022-37015 (score 53/100).
- CVE-2023-23958 MEDIUM 6.8 UPGRADE Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.
- CVE-2023-23957 MEDIUM 5.4 DOWNGRADE An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
- CVE-2022-37015 CRITICAL 9.8 UPGRADE Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege e
- CVE-2022-25630 MEDIUM 5.4 UPGRADE An authenticated user can embed malicious content with XSS into the admin group policy page.
- CVE-2022-25629 MEDIUM 5.4 UPGRADE An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious
FAQ
How do I fix symantec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is symantec being exploited right now?
None of the tracked symantec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which symantec CVE should I patch first?
CVE-2022-37015 currently ranks highest (53/100): Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege e.