CVE-2013-5014
7.5
CVSS v2.0 Base Score
86.20%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2/14/2014
Modified: 4/29/2026
Vulnerability Summary
CVSS v2 Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score (Exploitation Probability)
86.20%HIGH Exploitation Risk
99th percentile
This vulnerability has a 86.20% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other