CVE-2016-3649

4.3 mediumEPSS 1.7%

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-06-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

symantec:endpoint_protection_manager

References

http://www.securityfocus.com/bid/91440
http://www.securitytracker.com/id/1036196
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
http://www.securityfocus.com/bid/91440
http://www.securitytracker.com/id/1036196

Check your stack JSON