CVE-2016-5305

published 2016-06-30

CVE-2016-5305: Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection_manager	<= 12.1.6	—

CWE-79