CVE-2014-1652 in Web Gateway

Sumário (Inglês)

Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

23/01/2014

Divulgação

18/06/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
29836	Symantec Web Gateway Report Reflected Script de Site Cruzado	79	Alto	Correção oficial	CVE-2014-1652

Fontes

• MITRE
• NVD
• CVE Details