CVEvulnerability
CVE-2004-2755
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.
Affected configurations
• symantec web security 2.5
• symantec web security 3.0
• symantec web security 3.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/10618 Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html securityresponse.symantec.com
- http://www.osvdb.org/6754 www.osvdb.org
- http://www.securityfocus.com/bid/9418 www.securityfocus.com
- http://www.securitytracker.com/alerts/2004/Jan/1008711.html www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14825 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/10618 Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html securityresponse.symantec.com
- http://www.osvdb.org/6754 www.osvdb.org
- http://www.securityfocus.com/bid/9418 www.securityfocus.com
- http://www.securitytracker.com/alerts/2004/Jan/1008711.html www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14825 exchange.xforce.ibmcloud.com