CVE-2015-8148

7.5 highEPSS 1.6%

High (7.5) in symantec encryption management server. EPSS 1.6% chance of exploitation in the next 30 days.

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-02-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

symantec:encryption_management_server

References

http://www.securityfocus.com/bid/83271
http://www.securitytracker.com/id/1035063
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160218_00
http://www.securityfocus.com/bid/83271
http://www.securitytracker.com/id/1035063

Check your stack JSON