Search/CVE-2014-9225
● CVE

CVE-2014-9225

Vendorbroadcom, symantecProductsymantec critical system protection, data center securityDiscoveredJan 21, 2015UpdatedMay 6, 2026

The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated users to obtain sensitive server information via unspecified vectors.

View graph Watch Export
CVSS v3.1
—
EPSS
9.22%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Jan 21, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026