CVE-2010-0114

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-12-22 · updated 2026-06-16
Weakness: CWE-20

Description

fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request.

Affected products

Symantec Endpoint Protection: 11.0, 11.0-ru5, 11.0-ru6, 11.0-ru6mp1, 11.0.1, 11.0.1-mp1 (+7)

References

http://secunia.com/advisories/42643
http://securitytracker.com/id?1024900
http://www.securityfocus.com/bid/45372
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101215_00
http://www.vupen.com/english/advisories/2010/3252
http://www.zerodayinitiative.com/advisories/ZDI-10-291/
https://exchange.xforce.ibmcloud.com/vulnerabilities/64118
http://secunia.com/advisories/42643
http://securitytracker.com/id?1024900
http://www.securityfocus.com/bid/45372
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101215_00
http://www.vupen.com/english/advisories/2010/3252

Get alerted when CVE-2010-0114 or the next vulnerability affects your stack