CVE-2010-3719: Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manage...

Security readout for executives and security teams

This CVE describes a remote code execution flaw in the administrative interface of Symantec IM Manager 8.4.16 and earlier. If the vulnerable admin component is reachable, an attacker could cause the server to evaluate injected input as code. The sources do not provide CVSS scoring or confirm active exploitation. Exposure is most likely in legacy Symantec IM Manager deployments running 8.4.16 or earlier, especially where the administrative interface is reachable beyond tightly controlled management networks. Unsupported or forgotten installations create the main business risk. Treat this as a high-priority legacy exposure review. Arbitrary code execution in an administrative interface can lead to full system compromise, but urgency depends on whether affected Symantec IM Manager instances still exist and are reachable. Mitigation focus: Inventory Symantec IM Manager deployments and identify versions 8.4.16 or earlier.; Review Symantec advisory 20110131_00 for vendor-supported fixes or upgrade paths.; Limit administrative interface access to trusted management networks..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.