Reflected XSS Vulnerability in Symantec Advanced Secure Gateway and ProxySG

CVE-2016-10257

What is CVE-2016-10257?

The management console of Symantec's Advanced Secure Gateway (ASG) and ProxySG products is vulnerable to a reflected cross-site scripting (XSS) attack. An attacker can exploit this vulnerability by crafting a malicious URL that, when accessed, injects arbitrary JavaScript code into the web client application of the management console. This could facilitate phishing attacks and allow for the execution of harmful scripts in the context of authenticated user sessions. The affected versions include ASG 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References