CVE-2018-12244

Опубликовано: 25 апр. 2019

Источник: nvd

CVSS3: 6.3

CVSS2: 6.8

EPSS Низкий

Описание

SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.

Ссылки

https://support.symantec.com/en_US/article.SYMSA1479.html
Vendor Advisory
https://www.securityfocus.com/bid/107999
Third Party Advisory
VDB Entry
https://support.symantec.com/en_US/article.SYMSA1479.html
Vendor Advisory
https://www.securityfocus.com/bid/107999
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:mr1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:mr2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:mr3:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:mr4:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:mr4-mp2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp3:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru7:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp4:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp4a:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:11.0:ry7-mp3:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru1-mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru2-mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru3:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru4:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1a:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1b:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru4a:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru5:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp1:*:*:*:mac_os_x:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp10:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp3:*:*:*:mac_os_x:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp4:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp5:*:*:*:mac_os_x:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp6:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp7:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp8:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14:*:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14:mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14.0.0:mp2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14.0.1:*:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14.0.1:mp1:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14.0.1:mp2:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14.2:*:*:*:*:macos:*:*

cpe:2.3:a:symantec:endpoint_protection:14.2:mp1:*:*:*:macos:*:*

EPSS

Процентиль: 59%

0.00377

Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-1236

Связанные уязвимости

GHSA-h2ph-whqx-fccc