High severity8.8NVD Advisory· Published Jun 20, 2018· Updated Jun 17, 2026

CVE-2018-5237

Description

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.

Affected products

Symantec/Endpoint Protection4 versions
cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*range: <=14.0
- cpe:2.3:a:symantec:endpoint_protection:12.1:ru6mp10:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:14.0:ru1mp1:*:*:*:*:*:*
- (no CPE)range: <14 RU1 MP1, <12.1 RU6 MP10
Symantec Corporation/Symantec Endpoint Protectionv5
Range: Prior to 14 RU1 MP1 or 12.1 RU6 MP10

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/104199nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041180nvdThird Party AdvisoryVDB Entry
support.symantec.com/en_US/article.SYMSA1454.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000