CVE-2016-10257

Symantec ProxySG/ASG products are affected by CVE-2016-10257: a reflected XSS in the management console. Affected: ASG 6.6 and ASG 6.7 (before 6.7.2.1); ProxySG 6.5 (before 6.5.10.6), 6.6, and 6.7 (before 6.7.2.1). The flaw allows an attacker to inject arbitrary JavaScript into the management con...

SA155: Multiple ASG and ProxySG Vulnerabilities

SUMMARY The Symantec ASG and ProxySG management consoles are susceptible to multiple vulnerabilities. A remote attacker can, under certain circumstances, obtain sensitive authentication credential information, redirect target users to malicious sites, and inject arbitrary JavaScript code into the...