Vulnerability in Symantec Endpoint_protection
CVE-2018-12239
Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SE…
EPSS: 0.005 (40.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Symantec Endpoint_protection
- Symantec Endpoint_protection_cloud
- Symantec Norton_antivirus
- Symantec Corporation Norton; Endpoint Protection (Sep); Small Business Edition (Sep Sbe); Cloud Cloud) — versions Prior to 22.15.1 [Symantec Endpoint Protection Cloud (SEP Cloud)], Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)], Prior to 22.15 [Norton]
References
- secure@symantec.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-12239?
- CVE-2018-12239 is a medium-severity vulnerability in Symantec Endpoint_protection. CVSS score: 6.8/10. Published 2018-11-29.
- How severe is CVE-2018-12239?
- Medium severity. CVSS v3 base score is 6.8 out of 10.