CVE-2016-3649
No fix known EPSS 2%
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate administrator accounts via modified GET requests.
Products: symantec endpoint_protection_manager