Skip to content
OpenAdvisories
Unscored CVE-2018-12244 EUVD-2018-4222GHSA-h2ph-whqx-fccc

SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula…

Published Apr 25, 2019 · Updated Aug 5, 2024 · Assigned by symantec

Vendor: Symantec Product: Symantec Endpoint Protection (Mac Client)

Description

SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.

Affected products

VendorProductAffectedFixed
Symantec Symantec Endpoint Protection (Mac Client) Prior to and including 12.1 RU6 MP9, Prior to 14.2 RU1 —

References