Symantec Security Analytics vulnerabilities
2 known vulnerabilities affecting symantec/security_analytics.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2021-30642P2CRITICALCVSS 9.8≥ 7.2, < 7.2.7≥ 8.1, < 8.1.3-nsr3+1 more2021-04-27
CVE-2021-30642 [CRITICAL] CWE-78 CVE-2021-30642: An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.
An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.
nvd
CVE-2018-12241P4MEDIUMCVSS 6.1≥ 7.2.1, < 7.3.42018-11-27
CVE-2018-12241 [MEDIUM] CWE-79 CVE-2018-12241: The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-s
The Symantec Security Analytics (SA) 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks or other social engineering techniques. A successfu
nvd