Cross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Endpoint_protection_manager | — | Update to SEPM 12.1-RU6-MP4. | Apr 25, 2017 | Mar 18, 2016 |
| Symantec_endpoint_protection_manager | — | Upgrade to the latest version of Symantec Endpoint Protection Manager | May 7, 2026 | Mar 18, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub