The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.
https://www.exploit-db.com/exploits/37812/
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-1624