CVE-2007-3095
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0...
CVE-2007-3095 is a high vulnerability (CVSS 9.0) in Symantec Client Security, published June 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.15%, the 82nd percentile. No source names a fixed version.
- Severity
- 9.0 HighCVSS 2.0, NVD
- Exploit chance
- 2.15%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
CVE-2007-3095- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
CVE-2007-3095- Updated
- 2026-11-02
EUVDEUVD-2007-3087No score
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
EUVD-2007-3087- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwv5-v5pq-x484No score
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0...
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
- Record
GHSA-wwv5-v5pq-x484- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
osvdb.org/36107
securityfocus.com/bid/24325
exchange.xforce.ibmcloud.com/vulnerabilities/34895
symantec.com/avcenter/security/Content/2007.06.05.html
securitytracker.com/id?1018196
vupen.com/english/advisories/2007/2074
secunia.com/advisories/25543
nvd.nist.gov/vuln/detail/CVE-2007-3095
github.com/advisories/GHSA-wwv5-v5pq-x484