XSS Vulnerability in Symantec Gateway Security Management Service
CVE-2004-0192

Currently unrated

Key Information:

Vendor

Symantec

Vendor
CVE Published:
15 March 2004

What is CVE-2004-0192?

The Management Service of Symantec Gateway Security 2.0 is susceptible to a cross-site scripting (XSS) vulnerability, which can be exploited by remote attackers. By crafting a malicious URL that targets the /sgmi endpoint, attackers can execute scripts that steal cookies and hijack user management sessions. This exploit leverages the lack of proper input validation in error page rendering, leading to serious security implications for session integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.