Vulnerabilities > Symantec > Endpoint Protection > 11.0

DATE CVE VULNERABILITY TITLE RISK
2018-06-20 CVE-2018-5237 Unspecified vulnerability in Symantec Endpoint Protection
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
network
low complexity
symantec
8.8
2018-06-20 CVE-2018-5236 Race Condition vulnerability in Symantec Endpoint Protection
Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard).
network
high complexity
symantec CWE-362
5.3
2018-04-16 CVE-2016-9094 Improper Input Validation vulnerability in Symantec Endpoint Protection
Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality.
local
low complexity
symantec CWE-20
7.8
2018-04-16 CVE-2016-9093 Improper Input Validation vulnerability in Symantec Endpoint Protection
A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input.
local
high complexity
symantec CWE-20
7.0
2017-11-06 CVE-2017-6331 Unspecified vulnerability in Symantec Endpoint Protection
Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients.
local
low complexity
symantec
7.1