Impact of CVE-2025-22233 on Endpoint Protection Manager

Products

• Endpoint Protection

Issue/Introduction

You want to known if the Spring Framework component installed with Symantec Endpoint Protection Manager (SEPM) is impacted by CVE-2025-22233

Default install Path: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tomcat\instances\sepm-api\webapps\sepm\WEB-INF\lib\spring-core-5.3.42.jar
Installed Version: 5.3.42

Resolution

SEPM is not impacted by CVE-2025-22233.
The vulnerable component of Spring Framework is not used in SEPM.