<?xml version="1.0" encoding="UTF-8"?><rss version="2.0">

<channel>
<title>Security Updates</title>

<link>http://www.symantec.com/security_response/securityupdates/list.jsp?fid=security_advisory</link>

<description>Security Advisories Relating to Symantec Products</description>

<language>en-us</language>

<item>

<title>Symantec Endpoint Protection Multiple Issues</title>


<description>Revision History
5/23/2012 Proof-of-Concept information released publicly for CVE-2012-0289.  Clarification on affected product component and versions.

Severity







CVSS2

Base Score
...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_01</link>

<pubDate>Tue, 22 May 2012 11:31:41 PDT</pubDate>
</item>
<item>

<title>Symantec Endpoint Protection Manager 11.x Denial of Service</title>


<description> 

Revision History

5/23/2012 – Added 11.0 RU7(11.0.710x) to affected products


Severity

Medium

CVSS2 Base Score: 4

Impact: 2.86 Exploitability 7.95

CVSS2 Vector AV: AV:N/AC:L/Au:S/...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120522_00</link>

<pubDate>Tue, 22 May 2012 11:29:32 PDT</pubDate>
</item>
<item>

<title>Symantec Web Gateway Multiple Security Issues</title>


<description>Revision History

None

&amp;nbsp;

Severity







CVSS2

Base Score


Impact


Exploitability


CVSS2 Vector





Command injection code execution - High





8.33


10.0


6.45


AV:A/AC:L...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120517_00</link>

<pubDate>Thu, 17 May 2012 11:30:47 PDT</pubDate>
</item>
<item>

<title>Altiris WISE Package Studio SQL Injections </title>


<description>Revision History


None


Severity

Medium

CVSS2 Base Score: 5.82

Impact 6.44, Exploitability 6.45

CVSS2 Vector:&amp;nbsp; (AV:A/AC:L/Au:N/C:P/I:P/A:P)

Overview
Symantec&amp;rsquo;s Altiris W...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120314_00</link>

<pubDate>Wed, 14 Mar 2012 10:36:39 PDT</pubDate>
</item>
<item>

<title>Symantec Enterprise Vault Updates Oracle Outside In Module for Multiple Issues</title>


<description> 

Revision History

None

Severity

Medium

CVSS2 Base Score: 4.05

Impact 6.44, Exploitability 2.69

CVSS2 Vector:&amp;nbsp; AV:L/AC:M/Au:S/C:P/I:P/A:P

Exploit Publicly Available:&amp;nbsp; No...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120305_00</link>

<pubDate>Mon, 5 Mar 2012 12:02:12 PST</pubDate>
</item>
<item>

<title>Symantec pcAnywhere awhost32 Denial of Service</title>


<description> 

Revision History

&amp;nbsp;

4/9/2012 &amp;ndash; Symantec released the latest version of pcAnywhere: pcAnywhere 12.5 SP4 and pcAnywhere Solution 12.6.7 which included many performance enhanc...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120301_00</link>

<pubDate>Thu, 1 Mar 2012 09:55:18 PST</pubDate>
</item>
<item>

<title>Symantec pcAnywhere Multiple Security Updates</title>


<description>&amp;#65279; Last Update 2/10/2012 

&amp;nbsp;

Revision History

1/27/2012 - Added hot fix information for Symantec pcAnywhere versions 12.0.x and 12.1.x if customers are unable to follow the u...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120124_00</link>

<pubDate>Tue, 24 Jan 2012 12:49:40 PST</pubDate>
</item>
<item>

<title>Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting</title>


<description>Revision History
None

&amp;nbsp;

Severity

Medium

CVSS V2: 6

Impact: 6.44&amp;nbsp; Exploitability 6.83

CVSS V2 Vector AV: AV:N/AC:M/Au:S/C:P/I:P/A:P

Overview
Symantec Endpoint Protection M...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2012&amp;suid=20120116_00</link>

<pubDate>Mon, 16 Jan 2012 12:01:18 PST</pubDate>
</item>
<item>

<title>Symantec Updates Gear Driver for Local Access Denial of Service</title>


<description>Revision History

12/9/2011 - Updated advisory to reflect availability of Backup Exec System Recovery 2010 SP4 to address this issue.

&amp;nbsp;

Severity

Medium

CVSS2 Base Score: 4.4

Imp...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20111109_00</link>

<pubDate>Wed, 9 Nov 2011 10:10:28 PST</pubDate>
</item>
<item>

<title>Multi-Vendor Autonomy Verity Keyview Filter Multiple Issues</title>


<description> 

Revision History
None

Severity

Medium to High (based on the CVSS2 scoring below)

High
CVSS V2 9.33 (for SMSME and SMSDOM, running the Autonomy Verity Keyview Filter in-process or ou...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20111006_00</link>

<pubDate>Thu, 6 Oct 2011 12:21:57 PDT</pubDate>
</item>
<item>

<title>Symantec IM Manager Administrator Console Multiple Issues</title>


<description>Revision History 

None

&amp;nbsp;

Severity

High

&amp;nbsp;

CVSS2 scoring for Code Injection

CVSS2 Base Score: 7.6

Impact 9.5, Exploitability 5.5

CVSS2 Vector:&amp;nbsp; AV:A/AC:M/Au:S/C:P/I:...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110929_00</link>

<pubDate>Thu, 29 Sep 2011 11:48:00 PDT</pubDate>
</item>
<item>

<title>Symantec Enterprise Vault Update for Oracle Outside In Module</title>


<description>&amp;#65279;  

Revision History

None

&amp;nbsp;

Severity

High

CVSS2 Base Score: 8.31

Impact 8.54, Exploitability 8.58

CVSS2 Vector:&amp;nbsp; AV:N/AC:M/Au:N/C:P/I:P/A:C

Exploit Publicly Avai...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110901_00</link>

<pubDate>Thu, 1 Sep 2011 08:24:19 PDT</pubDate>
</item>
<item>

<title>Symantec Veritas Enterprise Administrator service (vxsvc) buffer overflows</title>


<description>&amp;#65279;  

&amp;#65279; &amp;#65279; &amp;#65279;

Revision History

&amp;nbsp;

None

&amp;nbsp;

Severity

High

CVSS V2 Base Score: 8.33

Impact 10, Exploitability 6.5

CVSS v2 Base Vector: AV:A/AC:L/Au:...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110815_00</link>

<pubDate>Mon, 15 Aug 2011 02:10:56 PDT</pubDate>
</item>
<item>

<title>Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting </title>


<description>Revision History
Altered to suggest users migrate to SEP 12.1 RU1

Severity

Medium

CVSS V2: 6

Impact: 6.44 &amp;nbsp;Exploitability 6.83

CVSS V2 Vector AV: AV:N/AC:M/Au:S/C:P/I:P/A:P

Ove...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110810_00</link>

<pubDate>Wed, 10 Aug 2011 15:33:16 PDT</pubDate>
</item>
<item>

<title>Symantec Web Gateway Blind SQL Injection</title>


<description>&amp;#65279;  

Revision History

None

&amp;nbsp;

Severity

Medium

CVSS2 Base Score: 5.82

Impact 6.4, Exploitability 6.45

CVSS2 Vector:&amp;nbsp; AV:A/AC:L/Au:N/C:P/I:P/A:P

Exploit Publicly Ava...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110707_00</link>

<pubDate>Thu, 7 Jul 2011 10:55:07 PDT</pubDate>
</item>
<item>

<title>Multi-Vendor Autonomy Verity Keyview PRZ Reader Filter Overflow </title>


<description>&amp;#65279; &amp;#65279; &amp;#65279;  

Revision History
None

Severity

High to Low (based on the CVSS sequence given below)


CVSS V2 9.33 (for products, SMSME and SMSDOM, running Keyview Filter ...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110531_00</link>

<pubDate>Tue, 31 May 2011 09:15:08 PDT</pubDate>
</item>
<item>

<title>Symantec Backup Exec Man-in-The-Middle </title>


<description>&amp;#65279; &amp;#65279;  

Revision History
None

Severity

Medium

&amp;nbsp;

CVSS v2 :&amp;nbsp;6.5

Impact :&amp;nbsp;10

Exploitability :&amp;nbsp;2.5

CVSS v2 Vector : (AV: A/AC: H/Au: S/C: C/I: C/A: C)
...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110526_00</link>

<pubDate>Thu, 26 May 2011 08:14:06 PDT</pubDate>
</item>
<item>

<title>Symantec LiveUpdate Administrator Cross-Site Request Forgery</title>


<description>&amp;#65279; &amp;#65279; &amp;#65279; &amp;#65279;  

Revision History

None

&amp;nbsp;

Severity

Medium

CVSS2 Base Score: 5.39

Impact 6.44, Exploitability 5.54

CVSS2 Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P...</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110321_00</link>

<pubDate>Mon, 21 Mar 2011 12:30:03 PDT</pubDate>
</item>
<item>

<title>Symantec IM Manager Eval() Code Injection</title>


<description>None</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110131_00</link>

<pubDate>Mon, 31 Jan 2011 09:49:40 PST</pubDate>
</item>
<item>

<title>Multiple Symantec Intel Alert Management System Arbitrary Message Creation  or Denial of Service</title>


<description>None</description>
<link>http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&amp;pvid=security_advisory&amp;year=2011&amp;suid=20110126_01</link>

<pubDate>Wed, 26 Jan 2011 10:06:16 PST</pubDate>
</item>
</channel>
</rss>


