CVE-2020-12593

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-18 · updated 2026-06-17

Description

Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.

Affected products

Symantec Endpoint Detection and Response: before 4.5 — fixed in 4.5

How to fix

Upgrade to a fixed version: Symantec Endpoint Detection and Response 4.5. Check the vendor advisory for mitigations.

References

https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562
https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562

Get alerted when CVE-2020-12593 or the next vulnerability affects your stack