WG
Product
Web Gateway
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Web Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-5017 | 9.8 | Jun 18 | SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors Affected: through 5.2 |
| CVE-2016-5313 | 8.8 | Apr 12 | Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands Affected: through 5.2.2 |
| CVE-2016-5310 | 5.5 | Apr 14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center… Affected: All versions, or not specified |
| CVE-2016-5309 | 5.5 | Apr 14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center… Affected: All versions, or not specified |
| CVE-2015-6548 | – | Sep 20 | Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote… Affected: through 5.2.2 |
| CVE-2015-6547 | – | Sep 20 | The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot… Affected: through 5.2.2 |
| CVE-2015-5693 | – | Sep 20 | The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via… Affected: through 5.2.2 |
| CVE-2015-5692 | – | Sep 20 | admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute… Affected: through 5.2.2 |
| CVE-2015-5691 | – | Sep 20 | Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277… Affected: through 5.2.2 |
| CVE-2015-5690 | – | Sep 20 | The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions… Affected: through 5.2.2 |
| CVE-2014-7285 | – | Dec 17 | The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings… Affected: through 5.2.1 |
| CVE-2014-1652 | – | Jun 18 | Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web… Affected: through 5.1.1; 5.1 |
| CVE-2014-1651 | – | Jun 18 | SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers to execute arbitrary SQL commands via… Affected: through 5.1.1; 5.1 |
| CVE-2014-1650 | – | Jun 18 | SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated users to execute arbitrary SQL commands… Affected: through 5.2 |
| CVE-2013-5013 | – | Feb 11 | Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web… Affected: through 5.1.1 |
| CVE-2013-5012 | – | Feb 11 | Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL… Affected: through 5.1.1 |
| CVE-2013-4673 | – | Aug 1 | The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute… Affected: through 5.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.3.18 |
| CVE-2013-4672 | – | Aug 1 | The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via… Affected: through 5.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.3.18 |
| CVE-2013-4671 | – | Aug 1 | Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the… Affected: through 5.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.3.18 |
| CVE-2013-4670 | – | Aug 1 | Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers to inject arbitrary… Affected: through 5.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.3.18 |
| CVE-2013-1617 | – | Aug 1 | Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute… Affected: through 5.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.3.18 |
| CVE-2013-1616 | – | Aug 1 | The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application… Affected: through 5.1; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.3.18 |
| CVE-2012-4178 | – | Aug 7 | SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid… Affected: 5.0.3.18 |
| CVE-2012-2977 | – | Jul 23 | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2012-2976 | – | Jul 23 | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2012-2961 | – | Jul 23 | SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2012-2957 | – | Jul 23 | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2012-2953 | – | Jul 23 | The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2012-2574 | – | Jul 23 | SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2012-0299 | – | May 21 | The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly… Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2012-0298 | – | May 21 | The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified… Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2012-0297 | – | May 21 | The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by… Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2012-0296 | – | May 21 | Multiple cross-site scripting (XSS) vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML… Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2011-0549 | – | Jul 11 | SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter Affected: 4.5; 4.5.0.326; 4.5.1.34; 4.5.1.44; 4.5.2.37; 4.5.2.65; +3 more |
| CVE-2010-0115 | – | Jan 14 | SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via… Affected: 4.5; 4.5.0.325; 4.5.0.326; 4.5.0.327 |
Showing 35