Vulnerability in Symantec Web_gateway
CVE-2015-5692
admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and conten…
EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.
Affected products
- Symantec Web_gateway
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@symantec.com (vdb-entry, x_refsource_SECTRACK)
- secure@symantec.com (x_refsource_MISC)
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)
- secure@symantec.com (vdb-entry, x_refsource_BID)