Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-5691
HistorySep 20, 2015 - 8:59 p.m.

CVE-2015-5691

2015-09-2020:59:06
CWE-79
[email protected]
web.nvd.nist.gov
25
cve-2015-5691
cross-site scripting
xss
symantec
web gateway
security vulnerabilities

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.729 High

EPSS

Percentile

98.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated an attack against admin_messages.php.

Affected configurations

NVD
Node
symantecweb_gatewayRange≤5.2.2

Related

prion 1
cvelist 1
nvd 1
zdi 1
symantec 1
nessus 1
prion
prion
Cross site scripting
2015-09-20 20:59:00
cvelist
cvelist
CVE-2015-5691
2015-09-20 20:00:00
nvd
nvd
CVE-2015-5691
2015-09-20 20:59:06
zdi
zdi
Symantec Web Gateway Arbitrary PHP File Upload Remote Code Execution Vulnerability
2015-09-16 00:00:00
symantec
symantec
Symantec Web Gateway Security Management Console Multiple Issues
2015-09-16 08:00:00
nessus
nessus
Symantec Web Gateway Database < 5.0.0.1277 Multiple Vulnerabilities (SYM15-009) (credentialed check)
2015-09-25 00:00:00

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.729 High

EPSS

Percentile

98.1%

JSON
Related for CVE-2015-5691
prion1cvelist1nvd1zdi1symantec1nessus1