CVE-2014-9226

Vendorbroadcom, symantecProductsymantec critical system protection, data center securityDiscoveredJan 21, 2015UpdatedMay 6, 2026

The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.

View graph Watch Export

CVSS v3.1

—

EPSS

1.54%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

3 relationships

CWE-264

source

Timeline

disclosure → media coverage

Jan 21, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026