CVE-2015-5691

Currently unrated

Key Information:

Vendor
Symantec
Status
Web Gateway
Vendor
CVE Published:
20 September 2015

Summary

Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated an attack against admin_messages.php.

References

http://www.securitytracker.com/id/1033625
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/76728
vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-15-443/
x_refsource_MISC

EPSS Score

69% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.