Vulnerabilities > CVE-2018-12244 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Symantec Endpoint Protection
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
LOW Summary
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 48 |