Vulnerabilities > Stormshield > Endpoint Security > 2.0.0

DATE CVE VULNERABILITY TITLE RISK
2021-07-13 CVE-2021-35957 Uncontrolled Search Path Element vulnerability in Stormshield Endpoint Security 2.0.0/2.0.2
Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones.
local
low complexity
stormshield CWE-427
6.7
2021-07-13 CVE-2021-31225 Unspecified vulnerability in Stormshield Endpoint Security 2.0.0/2.0.2
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed.
low complexity
stormshield
7.3