CVEvulnerability
CVE-2014-1652
2.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-06-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.3 LOW — AV:A/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters.
Affected configurations
• symantec web gateway (<= 5.1.1)
• symantec web gateway 5.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.kb.cert.org/vuls/id/719172 www.kb.cert.org
- http://www.securityfocus.com/bid/67755 www.securityfocus.com
- http://www.securitytracker.com/id/1030443 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00 www.symantec.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 Vendor Advisory
- http://www.kb.cert.org/vuls/id/719172 www.kb.cert.org
- http://www.securityfocus.com/bid/67755 www.securityfocus.com
- http://www.securitytracker.com/id/1030443 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit%20y_advisory&pvid=security_advisory&year=&suid=20140616_00 www.symantec.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2014&suid=20140616_00 Vendor Advisory