What’s Vulnerable › Vulnerabilities

CVE-2016-3651

• Severity: high (CVSS 8.0 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-30 · updated 2026-06-17
• Weakness: CWE-200

Description

Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecified vectors.

Affected products

• Symantec Endpoint Protection Manager (SEPM): through 12.1.6

References

• http://www.securityfocus.com/bid/91445
• http://www.securitytracker.com/id/1036196
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01
• http://www.securityfocus.com/bid/91445
• http://www.securitytracker.com/id/1036196
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01

Get alerted when CVE-2016-3651 or the next vulnerability affects your stack