Vulnerabilities > Symantec > IM Manager > 8.4.16

DATE CVE VULNERABILITY TITLE RISK
2011-10-02 CVE-2011-0554 Code Injection vulnerability in Symantec IM Manager
The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."
network
low complexity
symantec CWE-94
7.5
7.5
2011-10-02 CVE-2011-0553 SQL Injection vulnerability in Symantec IM Manager
SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
symantec CWE-89
7.5
7.5
2011-10-02 CVE-2011-0552 Cross-Site Scripting vulnerability in Symantec IM Manager
Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the (1) refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the (2) nav or (3) menuitem parameter to IMManager/Admin/IMAdminTOC_simple.asp, or the (4) action parameter to IMManager/Admin/IMAdminEdituser.asp.
network
symantec CWE-79
4.3
4.3