CVE-2011-0550
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via (1) the token parameter to portal/Help.jsp or (2) the URI in a console/apps/sepm request.
Risk Information
Base Score
6.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.719
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Symantec Endpoint Protection (x64) 11.0.6000 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6100 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6200 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6200.754 to latest version | Windows |
| Update Symantec Endpoint Protection (x64) 11.0.6300 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6000 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6100 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6200 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6200.754 to latest version | Windows |
| Update Symantec Endpoint Protection 11.0.6300 to latest version | Windows |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234