XSS in Symantec Web_gateway
CVE-2013-5013
Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via (1) vectors involving PHP scripts and (2…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.006 (70.1th percentile) — read the EPSS interpretation.
Affected products
- Symantec Web_gateway
- N/a — versions n/a
Weakness classification (CWE)
References
- 103145 (x_refsource_OSVDB, vdb-entry)
- 103144 (x_refsource_OSVDB, vdb-entry)
- 103147 (x_refsource_OSVDB, vdb-entry)
- 65405 (vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)