What’s Vulnerable › Vulnerabilities

CVE-2015-6556

• Severity: low (CVSS 2.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-12-18 · updated 2026-06-17
• Weakness: CWE-200

Description

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump.

Affected products

• Symantec Corporation Symantec Endpoint Encryption: through 11.0

References

• http://www.securityfocus.com/bid/78803
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151214_00
• http://www.securityfocus.com/bid/78803
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151214_00

Get alerted when CVE-2015-6556 or the next vulnerability affects your stack