CVE-2016-5306: Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protec...

Security readout for executives and security teams

This flaw affects Symantec Endpoint Protection Manager 12.1 before RU6 MP5. Its HTTPS protection was not enforced correctly, making unintended HTTP traffic on port 8445 easier to observe. An attacker with network visibility could potentially capture sensitive information. Public exploitation is not established in the provided sources. Exposure is most likely in environments still running SEPM 12.1 earlier than RU6 MP5. Risk depends on whether SEPM management traffic on port 8445 is reachable across networks where another party can observe traffic. Internet exposure is not proven by the sources. Treat this as a targeted legacy management-plane exposure. Prioritize remediation if SEPM 12.1 remains in use, especially where management traffic crosses shared, remote, or weakly monitored networks. Mitigation focus: Upgrade SEPM 12.1 to RU6 MP5 or a later vendor-supported release.; Review the Symantec advisory for any version-specific remediation instructions.; Restrict access to SEPM management ports to trusted administrative networks..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.