Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote…

published 2016-06-30 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-6255

cvss: 6.8; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 4.1%; EPSS 4.1% chance of exploitation in 30 days, percentile 90%
public exploits: 1; Exploit-DB

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Timeline

2016-06-29 First public exploit (EDB-40041)
2016-06-30 Published

Exploit prediction

4.12% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

EDB-40041 Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities webapps, 2016-06-29

CVSS scores

assigned by	version	score	vector
NVD	3.0	6.8	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
NVD	2.0	4.9	AV:N/AC:M/Au:S/C:P/I:P/A:N

References

exploit-db.com /exploits/40041/
exploit
symantec.com /security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628
vendor-advisory
securitytracker.com /id/1036196
vdb-entry
securityfocus.com /bid/91447
vdb-entry

Sources

CVE List CVE-2016-5304
NVD CVE-2016-5304

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary