CVE

Id
76526  
CVE No.
CVE-2014-9225  
Status
Candidate  
Description
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.  
Phase
Assigned (20141203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
704081 76526 CVE-2014-9225 BUGTRAQ:20150122 SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP  View
704082 76526 CVE-2014-9225 URL:http://www.securityfocus.com/archive/1/archive/1/534527/100/0/threaded  View
704083 76526 CVE-2014-9225 FULLDISC:20150122 SEC Consult SA-20150122-0 :: Multiple critical vulnerabilities in Symantec Data Center Security: Server Advanced (SDCS:SA) & SCSP  View
704084 76526 CVE-2014-9225 URL:http://seclists.org/fulldisclosure/2015/Jan/91  View
704085 76526 CVE-2014-9225 MISC:http://packetstormsecurity.com/files/130060/Symantec-SDCS-SA-SCSP-XSS-Bypass-SQL-Injection-Disclosure.html  View
704086 76526 CVE-2014-9225 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00  View
704087 76526 CVE-2014-9225 BID:72094  View

Related JVN