Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2015-1490

Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via a relative pathname in a client installation package.

  • Published: Aug 1, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-1490
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.5
  • AV:N/AC:L/Au:S/C:N/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
symantec / endpoint_protection_manager 12.1.0 12.1.0.x