What’s Vulnerable › Vulnerabilities

CVE-2016-3647

• Severity: high (CVSS 7.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-30 · updated 2026-06-17

Description

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network traffic to arbitrary intranet hosts, via a crafted request.

Affected products

• Symantec Endpoint Protection Manager (SEPM): through 12.1.6

References

• http://www.securityfocus.com/bid/91433
• http://www.securitytracker.com/id/1036196
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
• http://www.securityfocus.com/bid/91433
• http://www.securitytracker.com/id/1036196
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

Get alerted when CVE-2016-3647 or the next vulnerability affects your stack