CVE-2016-3652: Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection M...

Security readout for executives and security teams

CVE-2016-3652 is an authenticated XSS issue in Symantec Endpoint Protection Manager 12.1 before RU6 MP5. A logged-in remote user could inject script or HTML into management scripts. The sources do not show active exploitation, but a public exploit reference exists, so exposed legacy consoles deserve attention. Likely exposure is limited to organizations still running Symantec Endpoint Protection Manager 12.1 earlier than RU6 MP5, especially where the management console is reachable by many authenticated users or broad internal networks. Treat this as a legacy security-management-platform risk. Prioritize if SEPM 12.1 remains in production or if many users can access the console. It is not KEV-listed, but public exploit information raises urgency for cleanup. Mitigation focus: Upgrade SEPM 12.1 installations to RU6 MP5 or later per vendor guidance.; Restrict SEPM management console access to trusted administrative networks.; Review authenticated user roles and remove unnecessary console access..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.