Symantec Endpoint Protection Manager 1402415 Upd Jun 2026

w32tm /resync

| Vulnerability | Description | | :--- | :--- | | | Unauthenticated RCE via the SEPM Java RMI service | | CVE-2023-24557 | SQL injection in policy import functionality | | CVE-2022-42998 | Weak cryptographic storage for credentials | symantec endpoint protection manager 1402415 upd

This version focuses on enhancing the management and security capabilities of the SEPM console: Operating System Support w32tm /resync | Vulnerability | Description | |

18;write_to_target_document7;default18;write_to_target_document1a;_c8_saaOGFKeZ4-EP2On9yAE_20;4c85;0;4c29; particularly with custom in-house business applications.

Resolved issues with Automatic Location Switching (ALS) where clients would unexpectedly default to "Public" locations due to DNS lookup cache refresh errors. Security Enhancements

This build improved the engine's ability to handle modern exploits. It refined the "Exploit Prevention" features, reducing false positives that were problematic in earlier 14.2 builds, particularly with custom in-house business applications.