Vulnerability in Symantec Endpoint_protection
CVE-2018-12238
Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SE…
EPSS: 0.004 (32.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Symantec Endpoint_protection
- Symantec Endpoint_protection_cloud
- Symantec Norton_antivirus
- Symantec Corporation Norton; Endpoint Protection (Sep); Small Business Edition (Sep Sbe); Cloud Cloud) — versions Prior to 22.15.1 [Symantec Endpoint Protection Cloud (SEP Cloud)], Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)], Prior to 22.15 [Norton]
References
- secure@symantec.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-12238?
- CVE-2018-12238 is a high-severity vulnerability in Symantec Endpoint_protection. CVSS score: 7.8/10. Published 2018-11-29.
- How severe is CVE-2018-12238?
- High severity. CVSS v3 base score is 7.8 out of 10.