CVE-2025-13917

Elevation of Privileges in Web Security Services (WSS) Agent

State
Published
Severity
7.0 High
Published
Jan 28, 2026
Updated
Jan 28, 2026
Reserved
Dec 2, 2025

Read the record on cve.org

Description

WSS Agent, prior to 9.8.5, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsymantec

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
Symantec Web Security Services AgentBroadcom
  • 9.8.4Affected
  • 9.8.5Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.