CVE-2007-3095
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0...
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
CVE-2007-3095- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
CVE-2007-3095- Updated
- 2026-11-02
EUVDEUVD-2007-3087 No score
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
EUVD-2007-3087- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwv5-v5pq-x484 No score
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0...
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
GHSA-wwv5-v5pq-x484- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3095 is a high vulnerability (CVSS 9.0) in Symantec Client Security, published June 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.15%, the 82nd percentile. No source names a fixed version.
References
osvdb.org/36107
securityfocus.com/bid/24325
exchange.xforce.ibmcloud.com/vulnerabilities/34895
symantec.com/avcenter/security/Content/2007.06.05.html
securitytracker.com/id?1018196
vupen.com/english/advisories/2007/2074
secunia.com/advisories/25543
nvd.nist.gov/vuln/detail/CVE-2007-3095
github.com/advisories/GHSA-wwv5-v5pq-x484