CVE-2014-3438

Publication date

2014-11-07 11:00:00

Family

symantec

State

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.