CVE-2018-18367

Status: ModifiedHigh (7.8)—
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
CVSS

Version: 3.0
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base score: 7.8
Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 1.66%
Percentile among all scored CVEs: 76
Score date: 10/3/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)

Symantec — Endpoint Protection Manager
CWEs

CWE-426
References

Raw JSON (NVD)

Show
{
  "id": "CVE-2018-18367",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@symantec.com",
      "affectedData": [
        {
          "vendor": "Symantec Corporation",
          "product": "Symantec Endpoint Protection Manager",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to and including 12.1 RU6 MP9"
            },
            {
              "status": "affected",
              "version": "Prior to 14.2 RU1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-04-25T20:29:02.257",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/107996",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secure@symantec.com"
    },
    {
      "url": "https://support.symantec.com/en_US/article.SYMSA1479.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secure@symantec.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/107996",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.symantec.com/en_US/article.SYMSA1479.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-426"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead."
    },
    {
      "lang": "es",
      "value": "Symantec Endpoint Protection Manager (SEPM), en versiones anteriores e incluyendo a 12.1 RU6 MP9 y anteriores a 14.2 RU1, puede ser susceptible a una vulnerabilidad de precarga de DLL, que es un tipo de problema que puede ocurrir cuando una aplicación busca llamar a una DLL para su ejecución y un atacante proporciona una DLL maliciosa para usar en su lugar."
    }
  ],
  "lastModified": "2026-06-17T01:47:05.243",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:rtm:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B672BF68-0DED-426F-AA31-1B76807230E9"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4CA6352-2ABA-429B-A819-87A4AC8A704A"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1-mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "106ECE24-7D1B-496C-9780-3F936A8BBEB9"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B8BBCCE-6079-466D-8FEF-0F2BF45A9B61"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2-mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AF9640B-EFF4-47DA-8547-8A2EB7F94495"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51C1E440-D22D-4A38-AEDB-CD91FC7EE66D"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99063B1D-9665-4930-927F-208CC1407FAD"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BFBDA2F-F6FD-4612-A475-D6420DC42F01"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7664803-F871-4B97-BEEA-745F201727CF"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7919ABDE-8502-48E5-9BB5-A35CFB739DC9"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D27065C8-F545-4789-B603-76E455B9E004"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D59D3E7D-7612-4EE0-9202-3CCD4ADCD2BA"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "162CFA1F-31A5-4FAD-B0C4-C0554BB41F15"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89D5A17E-364D-4CB8-A993-E9FDE3A7CA00"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3617F8EA-1EAB-431E-B91D-2856FCECAD1E"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "265E189E-E0BA-4DEB-9E3B-85E63745E858"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFFACE1B-25E3-449F-9ADF-89479D4E8217"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DC18F5D-29B8-408F-945A-EA3BCED21413"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAD94BA1-9F03-484B-B59C-512D81EA2F11"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56AD1440-95D4-4056-A91A-A172183EDBF7"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23B2FBAE-3DFA-42D9-A3B0-F8128B743E6E"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B19539D-D88E-48B1-88E6-B018A5823871"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B47768FF-B636-46B4-BB5C-F810A960E86F"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B3A9535-EE47-4082-9067-57C123FD7E41"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14:mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E62D9514-7F15-4268-975B-CCAF1A452653"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14:mp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BFE2C7D-F285-4FFE-B335-2F0BB01D46CC"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "480356B5-FA66-410C-964F-23093722B17F"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "392639F5-44C8-40BF-B2E5-2E0E46EE7ECE"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40430FBE-B637-4FE6-B193-44B7B4F9E3B0"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "770A88E4-70E8-4F9F-951C-E31BAB7C0654"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11C6BE1B-F587-4C6F-AEF8-5E452323A5A0"
            },
            {
              "criteria": "cpe:2.3:a:symantec:endpoint_protection_manager:14.2:mp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15131034-0111-472A-91B4-14870AAB625E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@symantec.com"
}