CVE-2016-3652

Description

Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

https://www.exploit-db.com/exploits/40041/

http://www.securitytracker.com/id/1036196

http://www.securityfocus.com/bid/91444

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3