CVE-2022-37015

State
Published
Severity
9.8 Critical
Published
Nov 8, 2022
Updated
May 1, 2025
Reserved
Jul 28, 2022

Read the record on cve.org

Description

Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
Symantec Endpoint Detection and Responsen/a
  • 4.6.xAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.