CVE-2018-12244

SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.

Score

CVSS 3.0 6.3 Medium

Status

Modified - secure@symantec.com

Published

2019-04-25

Last modified

2024-08-05

Weaknesses

CWE-1236

Affected products

• Endpoint Protection (Symantec)
• Symantec Endpoint Protection Mac Client (Symantec Corporation)

References

• https://support.symantec.com/en_US/article.SYMSA1479.html
• https://www.securityfocus.com/bid/107999