Login Request a demo
Unscored severity · published Jan 30, 2007
CVE-2007-0563
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Web Security · Symantec
3.0.1.72; 3.01.59; 3.01.60; 3.01.61; 3.01.62; 3.01.63; +2 more · source: NVD
Affected product
WS
Web Security
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0563
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0563
osvdb.org
http://osvdb.org/32960
osvdb.org
http://osvdb.org/32961
Patch
http://secunia.com/advisories/23896
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html
securitytracker.com
http://securitytracker.com/id?1017558
www.securityfocus.com
http://www.securityfocus.com/bid/22184
More from Web Security
–
CVE-2007-0447
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives
–
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR…
–
CVE-2007-0564
The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file
–
CVE-2005-1346
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,…
–
CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative…