vulnerability
Symantec Endpoint Protection: Improper Input Validation (CVE-2018-12244)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Apr 25, 2019 | Nov 19, 2019 | Nov 27, 2024 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 25, 2019
Added
Nov 19, 2019
Modified
Nov 27, 2024
Description
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.
Solution
symantec-endpoint-protection-upgrade-14_2_3332_1000
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.