VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 20, 2015· Updated Jun 17, 2026

CVE-2014-9229

CVE-2014-9229

Description

Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow remote authenticated users to execute arbitrary SQL commands by leveraging the Limited Administrator role.

Affected products

2
  • Symantec/Endpoint Protection2 versions
    cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*range: <=12.1.5
    • (no CPE)range: <12.1.6

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.