Is SEPM, SEP, or LUA vulnerable to CVE-2025-27636?

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

You seek to know if Symantec Endpoint Protection Manager (SEPM), Symantec Endpoint Protection (SEP), or Live Update Administrator (LUA) are vulnerable to CVE-2025-27636.

Environment

Symantec Endpoint Protection Manager (SEPM) 
Symantec Endpoint Protection (SEP) 
Live Update Administrator (LUA) 

Resolution

SEPM, SEP and LUA are NOT impacted by CVE-2025-27636, because they do not use Apache Camel.

NOTE: Additional IPS coverage was added to all products using [SID: 35033] Web Attack: Apache Camel  CVE-2025-27636. 
To ensure you have the latest coverage make sure your IPS content is up to date. 

Additional Information

CRE-20852