CVE-2023-20260: Improper Access Control

A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper processing of command line arguments to application scripts. An...

CVE-2012-2953

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts...

CVE-2012-2976

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue...

CVE-2012-2976: Improper Neutralization of Special Elements used in an OS Command

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue...

CVE-2012-2953: Improper Neutralization of Special Elements used in an OS Command

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts...

PT-2012-4389

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x before 5.0.3.18 Description The issue allows remote attackers to execute arbitrary commands via crafted input to application scripts in the management console. Recommendations For Symantec Web Gateway versio...

CVE-2012-0297

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data...