CVE:CVE-2015-8157
CNNVD:CNNVD-201606-201
Symantec Embedded Security:Critical System Protection（SES:CSP）和Symantec Data Center Security: Server Advanced（SDCS:SA）都是美国赛门铁克（Symantec）公司的安全产品。SES:CSP是一款轻量级的入侵检测和防御系统客户端产品；SDCS:SA为软件定义数据中心的物理和虚拟服务器提供了安全防护。 
SES:CSP和SDCS:SA的Management server中存在SQL注入漏洞。攻击者可利用该漏洞执行任意SQL命令。以下版本受到影响：SES:CSP 1.0.x版本，6.5.0版本，DCS:SA 6.0.x版本，6.5.x版本，6.6版本，6.6 MP1版本，SCSP 5.2.9及之前版本。
solution:Upgrade broadcom symantec_critical_system_protection to a higher version than 5.2.9,and avoid the version (,5.2.9]; Upgrade broadcom symantec_data_center_security_server to a higher version than 6.5.0,6.6.0,and avoid the version 6.5.0,6.6.0; Upgrade broadcom symantec_data_center_security_server_and_agents to a higher version than 6.6.0,and avoid the version (,6.6.0]; Upgrade broadcom symantec_embedded_security_critical_system_protection to a higher version than 1.0,and avoid the version (,1.0]; Upgrade broadcom symantec_embedded_security_critical_system_protection_for_controllers_and_devices to a higher version than 6.5.0,and avoid the version (,6.5.0]