CVE-2015-1485

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.03%

Published

Jun 28, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.

Weaknesses (CWE)

CWE-352

Affected Products (1)

symantec · data_loss_preventionvulnerable

References (6)

http://www.securityfocus.com/bid/75289

Vendor Advisory

http://www.securitytracker.com/id/1032710

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00

http://www.securityfocus.com/bid/75289

Vendor Advisory

http://www.securitytracker.com/id/1032710

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00

KEV Catalog EPSS Scores Vendors All CVEs