vulnerability
Symantec Endpoint Protection Manager: CVE-2016-5305: DOM-based link manipulation in php script
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:S/C:N/I:P/A:N) | Jun 30, 2016 | Apr 25, 2017 | Oct 30, 2017 |
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Jun 30, 2016
Added
Apr 25, 2017
Modified
Oct 30, 2017
Description
Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack.
Solution
endpoint_protection_manager-cve-2016-5305
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.