Web Gateway (Symantec) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2017-04-14. Vendor: Symantec.

CVEs of Web Gateway

• CVE-2016-5309 - CVSS 5.5 (medium), 2017-04-14: The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud;…
• CVE-2016-5310 - CVSS 5.5 (medium), 2017-04-14: The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud;…
• CVE-2016-5313 - CVSS 8.8 (high), 2017-04-12: Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.
• CVE-2015-6548 - CVSS 5.8 (medium), 2015-09-20: Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB…
• CVE-2015-6547 - CVSS 8.3 (high), 2015-09-20: The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute…
• CVE-2015-5693 - CVSS 7.9 (high), 2015-09-20: The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute…
• CVE-2015-5692 - CVSS 7.9 (high), 2015-09-20: admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated…
• CVE-2015-5691 - CVSS 4.3 (medium), 2015-09-20: Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software before…
• CVE-2015-5690 - CVSS 8.5 (high), 2015-09-20: The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended…
• CVE-2014-7285 - CVSS 6.5 (medium), 2014-12-17: The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by…
• CVE-2014-1651 - CVSS 5.8 (medium), 2014-06-18: SQL injection vulnerability in clientreport.php in the management console in Symantec Web Gateway (SWG) before 5.2 allows remote attackers to execute…
• CVE-2014-1650 - CVSS 5.2 (medium), 2014-06-18: SQL injection vulnerability in user.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote authenticated users to execute…
• CVE-2013-5017 - CVSS 9.8 (critical), 2014-06-18: SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified…
• CVE-2014-1652 - CVSS 2.3 (low), 2014-06-18: Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to…
• CVE-2013-5013 - CVSS 4.3 (medium), 2014-02-11: Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to…
• CVE-2013-5012 - CVSS 6.5 (medium), 2014-02-11: Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to…
• CVE-2013-1617 - CVSS 7.4 (high), 2013-08-01: Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated…
• CVE-2013-4672 - CVSS 7.2 (high), 2013-08-01: The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended…
• CVE-2013-1616 - CVSS 8.3 (high), 2013-08-01: The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command…
• CVE-2013-4671 - CVSS 6 (medium), 2013-08-01: Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated…
• CVE-2013-4670 - CVSS 4.3 (medium), 2013-08-01: Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers…
• CVE-2013-4673 - CVSS 5.8 (medium), 2013-08-01: The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote…
• CVE-2012-4178 - CVSS 7.5 (high), 2012-08-07: SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL…
• CVE-2012-2953 - CVSS 10 (critical), 2012-07-23: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application…
• CVE-2012-2976 - CVSS 10 (critical), 2012-07-23: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to…
• CVE-2012-2574 - CVSS 7.5 (high), 2012-07-23: SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands…
• CVE-2012-2961 - CVSS 7.5 (high), 2012-07-23: SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands…
• CVE-2012-2957 - CVSS 7.2 (high), 2012-07-23: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion"…
• CVE-2012-2977 - CVSS 5 (medium), 2012-07-23: The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application…
• CVE-2012-0298 - CVSS 6.4 (medium), 2012-05-21: The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files…
• CVE-2012-0297 - CVSS 10 (critical), 2012-05-21: The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to…
• CVE-2012-0296 - CVSS 4.3 (medium), 2012-05-21: Multiple cross-site scripting (XSS) vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject…
• CVE-2012-0299 - CVSS 10 (critical), 2012-05-21: The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated…
• CVE-2011-0549 - CVSS 7.5 (high), 2011-07-11: SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via…
• CVE-2010-0115 - CVSS 7.5 (high), 2011-01-14: SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute…