CVEvulnerability
CVE-2011-0550
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via (1) the token parameter to portal/Help.jsp or (2) the URI in a console/apps/sepm request.
Affected configurations
• symantec endpoint protection 11.0.6000
• symantec endpoint protection 11.0.6100
• symantec endpoint protection 11.0.6200
• symantec endpoint protection 11.0.6200.754
• symantec endpoint protection 11.0.6300
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/43662 Vendor Advisory
- http://securitytracker.com/id?1025919 securitytracker.com
- http://www.osvdb.org/74465 www.osvdb.org
- http://www.osvdb.org/74466 www.osvdb.org
- http://www.securityfocus.com/bid/48231 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00 www.symantec.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69136 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43662 Vendor Advisory
- http://securitytracker.com/id?1025919 securitytracker.com
- http://www.osvdb.org/74465 www.osvdb.org
- http://www.osvdb.org/74466 www.osvdb.org
- http://www.securityfocus.com/bid/48231 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110810_00 www.symantec.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69136 exchange.xforce.ibmcloud.com