CVE-2015-1489 EXPLOIT
8.5
HIGH · CVSS 2.0 · EPSS 25.4% (pctl 98)
Patch early
A public exploit exists.
Description
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.
Scoring
| CVSS | 8.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:S/C:C/I:C/A:C |
| EPSS | 25.36% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2015-08-01 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| symantec | endpoint protection manager |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Symantec Endpoint Protection Manager - Authentication Bypass / Code Execution (Metasploit) | 2015-08-18 |
References
- http://www.securityfocus.com/bid/76078
- http://www.securitytracker.com/id/1033165
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
- https://www.exploit-db.com/exploits/37812/
- http://www.securityfocus.com/bid/76078
- http://www.securitytracker.com/id/1033165
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
- https://www.exploit-db.com/exploits/37812/
→ the Explorer · watch your stack · NVD