Cross-Site Scripting Vulnerabilities in Symantec Web Gateway Appliances

CVE-2015-5691

Summary

Multiple cross-site scripting (XSS) vulnerabilities exist within the PHP scripts of the management console in Symantec Web Gateway appliances. These vulnerabilities can be exploited by remote attackers, enabling them to inject arbitrary web scripts or HTML through unspecified vectors, which may compromise the security of the system. One notable example was demonstrated through an attack against admin_messages.php, revealing the critical need for updating affected systems to ensure protection against such vulnerabilities.

References