What’s Vulnerable › Vulnerabilities

CVE-2016-3649

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-30 · updated 2026-06-17
• Weakness: CWE-200

Description

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests.

Affected products

• Symantec Endpoint Protection Manager (SEPM): through 12.1.6

References

• http://www.securityfocus.com/bid/91440
• http://www.securitytracker.com/id/1036196
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
• http://www.securityfocus.com/bid/91440
• http://www.securitytracker.com/id/1036196
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

Get alerted when CVE-2016-3649 or the next vulnerability affects your stack