CVE-2009-1432

no score yetEPSS 4.2%

Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2009-04-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

symantec:antivirus
symantec:client_security
symantec:endpoint_protection

References

http://secunia.com/advisories/34856
http://secunia.com/advisories/34935
http://securitytracker.com/id?1022136
http://securitytracker.com/id?1022137
http://securitytracker.com/id?1022138

Check your stack JSON