Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2016-3652

Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Jun 30, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-3652
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
symantec / endpoint_protection_manager - 12.1.6.x