Lucene search
HistorySep 20, 2015 - 8:59 p.m.
CVE-2015-5691
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.729
Percentile
98.1%
Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated an attack against admin_messages.php.
Affected configurations
Node
symantecweb_gatewayRange≤5.2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | web_gateway | * | cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2015-09-20 20:59:00
cvelist
cvelist
CVE-2015-5691
2015-09-20 20:00:00
cve
cve
CVE-2015-5691
2015-09-20 20:59:06
zdi
zdi
symantec
symantec
Symantec Web Gateway Security Management Console Multiple Issues
2015-09-16 08:00:00
nessus
nessus
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.729
Percentile
98.1%
Related for NVD:CVE-2015-5691