CVEvulnerability
CVE-2013-1617
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.4 HIGH — AV:A/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
• symantec web gateway (<= 5.1)
• symantec web gateway 5.0
• symantec web gateway 5.0.1
• symantec web gateway 5.0.2
• symantec web gateway 5.0.3
• symantec web gateway 5.0.3.18
• symantec web gateway appliance 8450
• symantec web gateway appliance 8490
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html packetstormsecurity.com
- http://www.securityfocus.com/bid/61101 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 Vendor Advisory
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt www.sec-consult.com
- http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html packetstormsecurity.com
- http://www.securityfocus.com/bid/61101 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 Vendor Advisory
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt www.sec-consult.com