Symantec Data Loss Prevention vulnerabilities

5 known vulnerabilities affecting symantec/data_loss_prevention.

Total CVEs

5

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH1MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2024-23617HIGHCVSS 8.8≥ 12.0, ≤ 14.0.22024-01-26

CVE-2024-23617 [CRITICAL] CWE-119 CVE-2024-23617: A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

CVE-2019-9701MEDIUMCVSS 4.8PoCv14.0v14.0.1+6 more2019-06-19

CVE-2019-9701 [MEDIUM] CWE-79 CVE-2019-9701: DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.

CVE-2014-9230MEDIUMCVSS 4.3≤ 12.5.12015-06-28

CVE-2014-9230 [MEDIUM] CWE-79 CVE-2014-9230: Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Syma Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2015-1485MEDIUMCVSS 6.8≤ 12.5.12015-06-28

CVE-2015-1485 [MEDIUM] CWE-352 CVE-2015-1485: Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.

CVE-2011-0548CRITICALCVSS 9.3≤ 10.5.2v7.0+10 more2011-07-18

CVE-2011-0548 [CRITICAL] CWE-119 CVE-2011-0548: Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Syma Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security (SMS) 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention (DLP) before 10.5.3 and 11.x before 11.1, allows remote attackers to cause a denial of service (application crash) or p