NVD

Id
40482  
Name
CVE-2013-5014  
Description
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-02-14  
Modified Date
2014-03-26  
Seq
2013-5014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205402 40482 CVE-2013-5014 31853  View
205403 40482 CVE-2013-5014 31917  View
205404 40482 CVE-2013-5014 65466  View
205405 40482 CVE-2013-5014 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00  View
205406 40482 CVE-2013-5014 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24464 JVNDB-2013-006039 Symantec Endpoint Protection Manager および Symantec Protection Center Small Business Edition における任意のファイルを読まれる脆弱性 Symantec Endpoint Protection Manager (SEPM) の管理コンソールおよび Symantec Protection Center Small Business Edition には、任意のファイルを読まれる脆弱性が存在します。 CVE-2013-5014 64956 CVE-2013-5014 40482 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006039.html 2013-07-29 2014-02-17 View