CVE-2009-1432

N/A Unknown
Published: April 30, 2009 Modified: April 23, 2026
View on NVD

Description

Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/34856
Source: cve@mitre.org
Third Party Advisory
http://secunia.com/advisories/34935
Source: cve@mitre.org
Third Party Advisory
http://securitytracker.com/id?1022136
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://securitytracker.com/id?1022137
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://securitytracker.com/id?1022138
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/34668
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00
Source: cve@mitre.org
Vendor Advisory
http://www.vupen.com/english/advisories/2009/1202
Source: cve@mitre.org
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1204
Source: cve@mitre.org
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50172
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://secunia.com/advisories/34856
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/34935
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://securitytracker.com/id?1022136
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://securitytracker.com/id?1022137
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://securitytracker.com/id?1022138
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/34668
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2009/1202
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1204
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50172
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry

20 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
3.9%
88th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

symantec

Related CVEs

CVE-2026-7024 5.4
CVE-2026-7023 6.3
CVE-2026-7022 7.3
CVE-2026-7021 3.5
CVE-2026-7020 5.6