Vulnerability Name: | CVE-2016-5305 (CCN-114608) | ||||||||||||
Assigned: | 2016-06-28 | ||||||||||||
Published: | 2016-06-28 | ||||||||||||
Updated: | 2017-09-01 | ||||||||||||
Summary: | Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack. | ||||||||||||
CVSS v3 Severity: | 5.4 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) 4.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
5.3 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 3.5 Low (CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N)
| ||||||||||||
Vulnerability Type: | CWE-79 | ||||||||||||
Vulnerability Consequences: | Cross-Site Scripting | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2016-5305 Source: BID Type: UNKNOWN 91448 Source: CCN Type: BID-91448 Symantec Endpoint Protection Manager and Client CVE-2016-5305 Security Bypass Vulnerability Source: SECTRACK Type: UNKNOWN 1036196 Source: XF Type: UNKNOWN symantec-cve20165305-xss(114608) Source: CCN Type: Symantec Security Advisory SYM16-011 Symantec Endpoint Protection Manager Multiple Security Issues Source: CONFIRM Type: Vendor Advisory https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||||||
BACK |