CVE-2014-1652

Symantec Web Gateway <5.2 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters.

References (5)

[Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/719172

[Third Party Advisory] http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00

[Vendor Advisory] http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/67755

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1030443

Scores

EPSS 0.0053

EPSS Percentile 67.2%

Details

CWE

CWE-79

Status published

Products (3)

symantec/web_gateway < 5.1.1

symantec/web_gateway

n/a/n/a

Published Jun 18, 2014

Tracked Since Feb 18, 2026