CVE-2004-2755

Currently unrated

Key Information:

Vendor
Symantec
Status
Web Security
Vendor
CVE Published:
31 December 2004

Summary

Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.

References

http://www.securitytracker.com/alerts/2004/Jan/1008711.html
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/9418
vdb-entryx_refsource_BID
http://secunia.com/advisories/10618
third-party-advisoryx_refsource_SECUNIA

EPSS Score

25% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.