Web Gateway Security Vulnerabilities and Issues — Web Gateway CVE List

Lucene search

SymantecWeb Gateway

4 matches found

CVE•added 2014/12/17 4:59 p.m.•47 views

CVE-2014-7285

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

6.5CVSS8.8AI score0.70626EPSS

CVE•added 2012/05/21 8:55 p.m.•44 views

CVE-2012-0298

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors.

6.4CVSS6.7AI score0.10018EPSS

CVE•added 2013/08/01 1:32 p.m.•41 views

CVE-2013-4671

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

6CVSS6.6AI score0.00771EPSS

CVE•added 2014/02/11 2:55 a.m.•31 views

CVE-2013-5012

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

6.5CVSS8.2AI score0.00434EPSS