CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.0. It may be remotely exploitable. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2015-1491
Severity
MEDIUM
CVSS
6
EPSS
1.64%
Original NVD Description
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.