CVE-2015-8153

High

Published: 18/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8153 is an SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

This vulnerability could lead to unauthorized access to data and potential system takeover by malicious users.

Recommendation

It is recommended to update Symantec Endpoint Protection Manager to version 12.1 RU6-MP4 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Symantec Endpoint Protection Manager (SEPM) 12.1 przed RU6-MP4

CVE-2015-8152High
CVE-2015-8152 is a CSRF vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 that allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script.

Original NVD description (English source)

SQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.