Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-7285
HistoryDec 17, 2014 - 4:59 p.m.

CVE-2014-7285

2014-12-1716:59:00
CWE-77
[email protected]
web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.468 Medium

EPSS

Percentile

97.5%

JSON

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

Affected configurations

NVD
Node
symantecweb_gatewayRange≤5.2.1

Related

packetstorm 2
zdt 2
openvas 2
symantec 1
cve 1
nessus 1
securityvulns 2
cvelist 1
prion 1
checkpoint_advisories 1
packetstorm
packetstorm
Symantec Web Gateway 5.2.1 OS Command Injection
2014-12-31 00:00:00
Symantec Web Gateway 5 restore.php Command Injection
2015-03-03 00:00:00
zdt
zdt
Symantec Web Gateway 5 restore.php Command Injection Exploit
2015-03-03 00:00:00
Symantec Web Gateway 5.2.1 OS Command Injection Vilnerability
2015-01-01 00:00:00
openvas
openvas
Symantec Web Gateway Unspecified Remote Command Execution Vulnerability (Dec 2014)
2014-12-23 00:00:00
Symantec Web Gateway < 5.2.2 Command Injection Vulnerability
2014-12-18 00:00:00
symantec
symantec
Symantec Web Gateway OS Authenticated Command Injection
2014-12-16 08:00:00
cve
cve
CVE-2014-7285
2014-12-17 16:59:00
nessus
nessus
Symantec Web Gateway < 5.2.2 Authenticated OS Command Injection (SYM14-016)
2014-12-19 00:00:00
securityvulns
securityvulns
[KIS-2014-19] Symantec Web Gateway &lt;= 5.2.1 &#40;restore.php&#41; OS Command Injection Vulnerability
2015-01-02 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2015-01-02 00:00:00
cvelist
cvelist
CVE-2014-7285
2014-12-17 16:00:00
prion
prion
Design/Logic Flaw
2014-12-17 16:59:00
checkpoint_advisories
checkpoint_advisories
Symantec Web Gateway OS Command Injection (CVE-2014-7285; CVE-2016-5313)
2015-03-25 00:00:00

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.468 Medium

EPSS

Percentile

97.5%

JSON
Related for NVD:CVE-2014-7285
packetstorm2zdt2openvas2symantec1cve1nessus1securityvulns2cvelist1prion1checkpoint_advisories1