{"id":"CVE-2013-5015","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-5015","generatedAt":"2026-10-27T21:42:30.959Z","title":"SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows…","description":"SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.","published":"2014-02-14T13:10:30.000Z","lastModified":"2026-06-16T23:58:15.000Z","status":"Modified","sourceIdentifier":"secure@symantec.com","cvss":{"version":"2.0","score":6.5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P"},"cwe":["CWE-89"],"affected":["symantec/endpoint protection manager","symantec/protection center"],"epss":{"score":0.28759,"percentile":0.98131,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2014-02-23","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":31917,"kind":"exploit","title":"Symantec Endpoint Protection Manager - Remote Command Execution (Metasploit)","url":"https://www.exploit-db.com/exploits/31917","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/31917.rb","file":"exploits/windows/remote/31917.rb","published":"2014-02-26","added":"2014-02-26","updated":"2014-02-26","author":"Metasploit","type":"remote","platform":"windows","port":9090,"verified":true,"codes":["CVE-2013-5014","OSVDB-103305","CVE-2013-5015"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt"},{"edbId":31853,"kind":"exploit","title":"Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution","url":"https://www.exploit-db.com/exploits/31853","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/31853.py","file":"exploits/windows/remote/31853.py","published":"2014-02-23","added":"2014-02-23","updated":"2014-02-23","author":"Chris Graham","type":"remote","platform":"windows","port":null,"verified":true,"codes":["CVE-2013-5015","CVE-2013-5014","OSVDB-103306","OSVDB-103305"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/misc/symantec-sepm-exploit.png","referenceUrl":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 28.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://osvdb.org/103306","source":"secure@symantec.com"},{"url":"http://www.exploit-db.com/exploits/31853","source":"secure@symantec.com"},{"url":"http://www.exploit-db.com/exploits/31917","source":"secure@symantec.com"},{"url":"http://www.securityfocus.com/bid/65467","source":"secure@symantec.com"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00","tags":["Vendor Advisory"],"source":"secure@symantec.com"},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt","source":"secure@symantec.com"},{"url":"http://osvdb.org/103306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/31853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/31917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/65467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-5015","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}