CVE-2014-9226: The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Cen...

Security readout for executives and security teams

This flaw affects legacy Symantec security management servers and may let a local user bypass intended protection policies. In business terms, controls expected to enforce host security could be weakened from inside an affected server. The public record does not provide CVSS data or detailed vectors for this specific CVE. Exposure is likely limited to organizations still running the affected Symantec SCSP or SDCS:SA management server versions. The issue requires local user context according to the CVE description, so externally exposed attack surface is not established by the provided sources. Treat this as a focused legacy-security-product risk. It is not shown as actively exploited, but affected management servers enforce security controls, so confirm exposure and vendor remediation status during vulnerability management review. Mitigation focus: Inventory SCSP and SDCS:SA management servers and record exact versions.; Check the Symantec advisory for supported updates or vendor mitigation guidance.; Restrict local user access to affected management servers..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.