CVE-2015-1485

no score yetEPSS 1.0%

Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to hijack the authentication of administrators.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2015-06-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

symantec:data_loss_prevention

References

http://www.securityfocus.com/bid/75289
http://www.securitytracker.com/id/1032710
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150622_00
http://www.securityfocus.com/bid/75289
http://www.securitytracker.com/id/1032710

Check your stack JSON