CVE-2016-3647

published 2016-06-30

CVE-2016-3647: Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and…

high 7.7 CVSS 3.0

AV N AC L PR L UI N S C C N I H A N

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network traffic to arbitrary intranet hosts, via a crafted request.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection_manager	<= 12.1.6	—