CVE-2018-5240

Severity: high (CVSS 8.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-25 · updated 2026-06-17

Description

The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.

Affected products

Symantec Corporation Inventory Plugin for Symantec Management Agent: through 7.6; 8.0-hf6, 8.1-ru7

References

http://www.securityfocus.com/bid/104753
http://www.securitytracker.com/id/1041654
https://support.symantec.com/en_US/article.SYMSA1456.html
http://www.securityfocus.com/bid/104753
http://www.securitytracker.com/id/1041654
https://support.symantec.com/en_US/article.SYMSA1456.html

Get alerted when CVE-2018-5240 or the next vulnerability affects your stack