CVE-2015-1487: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remot...

Security readout for executives and security teams

CVE-2015-1487 affects the Symantec Endpoint Protection Manager 12.1 management console before 12.1-RU6-MP1. An authenticated remote user could abuse crafted filenames to write files where they should not, potentially becoming an administrator. This targets the management layer for endpoint protection, so business impact can be larger than a single workstation. Organizations are exposed if they still run SEPM 12.1 earlier than 12.1-RU6-MP1 and allow non-minimal authenticated access to the management console. Treat this as high priority where SEPM 12.1 remains in use. The vulnerability can turn authenticated console access into administrative control over the endpoint security management platform. Mitigation focus: Inventory SEPM management servers and confirm exact 12.1 build levels.; Upgrade affected SEPM 12.1 systems to 12.1-RU6-MP1 or vendor-directed replacement.; Restrict management console access to trusted administrative networks only..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.