CVE-2016-3653

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.34%

Published

Jun 30, 2016

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBSymantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to hijack the authentication of arbitrary users.

Weaknesses (CWE)

CWE-352

Affected Products (1)

symantec · endpoint_protection_managervulnerable

References (8)

http://www.securityfocus.com/bid/91442

http://www.securitytracker.com/id/1036196

https://www.exploit-db.com/exploits/40041/

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

Vendor Advisory

http://www.securityfocus.com/bid/91442

http://www.securitytracker.com/id/1036196

https://www.exploit-db.com/exploits/40041/

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs