Are SEP, SEPM and LUA vulnerable to CVE-2025-54988 and CVE-2025-66516?

Products

• Endpoint Security Complete
• Endpoint Protection

Issue/Introduction

You need to know whether Symantec Endpoint Protection Manager (SEPM), Symantec Endpoint Protection (SEP) client and Live Update Administrator (LUA) are affected by CVE-2025-54988 and CVE-2025-66516.

Environment

• Symantec Endpoint Protection Manager (SEPM) 14.x
• Symantec Endpoint Protection (SEP) client 14.x
• Live Update Administrator (LUA) 2.3.x

Resolution

These products are not impacted by CVE-2025-54988 and CVE-2025-66516, because they don't use Apache Tika PDF parser module, Apache Tika core, and/or Apache Tika parsers.  

Additional Information

CRE-22886