CVE-2020-5839

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-08 · updated 2026-06-17

Description

Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.

Affected products

Symantec Endpoint Detection and Response: before 4.4 — fixed in 4.4

How to fix

Upgrade to a fixed version: Symantec Endpoint Detection and Response 4.4. Check the vendor advisory for mitigations.

References

https://support.broadcom.com/security-advisory/content/security-advisories/SEDR-Information-Disclosure/SYMSA16090
https://support.broadcom.com/security-advisory/content/security-advisories/SEDR-Information-Disclosure/SYMSA16090

Get alerted when CVE-2020-5839 or the next vulnerability affects your stack