CVE-2015-5691

Multiple cross-site scripting XSS vulnerabilities in PHP scripts in the management console on Symantec Web Gateway SWG appliances with software before 5.2.2 DB 5.0.0.1277 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated an attack against...

CVE-2015-5691

The CVE-2015-5691 issue affects Symantec Web Gateway (SWG) management console on SWG appliances prior to version 5.2.2 with DB 5.0.0.1277, where PHP-based management-console scripts (notably admin_messages.php) are vulnerable to reflected XSS that can cause arbitrary script execution in a user’s ...