Symantec Data Center Security — known CVE vulnerabilities

Every CVE whose affected-product data names Symantec Data Center Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2014-3440 — CVSS 9.0 (critical): The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data…
• CVE-2020-5832 — CVSS 7.8 (high): Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability…
• CVE-2014-9226 — CVSS 7.2 (high): The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced…
• CVE-2014-7289 — CVSS 6.5 (medium): SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data…
• CVE-2014-9225 — CVSS 4.0 (medium): The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center…
• CVE-2014-9224 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec…