CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec…
Does this matter?
Lower severity and a low EPSS score (4.23%). Track it; it rarely justifies an emergency change on its own.
Description
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 4.23% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- symantec/antivirus · symantec/client security · symantec/endpoint protection
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/34856Third Party Advisory
- http://secunia.com/advisories/34935Third Party Advisory
- http://securitytracker.com/id?1022136Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022137Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022138Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/34668Third Party Advisory, VDB Entry
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1202Third Party Advisory
- http://www.vupen.com/english/advisories/2009/1204Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50172Third Party Advisory, VDB Entry
- http://secunia.com/advisories/34856Third Party Advisory
- http://secunia.com/advisories/34935Third Party Advisory
- http://securitytracker.com/id?1022136Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022137Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022138Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/34668Third Party Advisory, VDB Entry
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1202Third Party Advisory
- http://www.vupen.com/english/advisories/2009/1204Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50172Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.