CVEvulnerability
CVE-2016-5304
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-06-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.8 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N
Description
Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected configurations
• symantec endpoint protection manager (<= 12.1.6)
References
- http://www.securityfocus.com/bid/91447 www.securityfocus.com
- http://www.securitytracker.com/id/1036196 www.securitytracker.com
- https://www.exploit-db.com/exploits/40041/ www.exploit-db.com
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 Vendor Advisory
- http://www.securityfocus.com/bid/91447 www.securityfocus.com
- http://www.securitytracker.com/id/1036196 www.securitytracker.com
- https://www.exploit-db.com/exploits/40041/ www.exploit-db.com
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 Vendor Advisory