medium4.8
CVE-2017-13678
Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles.
Impact
Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Advanced Secure Gateway | from 6.6 before 6.6.5.14 from 6.7.3 before 6.7.3.7 from 6.7.4 before 6.7.4.107 |
| Broadcom | Symantec Proxysg | from 6.5 before 6.5.10.8 from 6.6 before 6.6.5.14 from 6.7.3 before 6.7.3.7 from 6.7.4 before 6.7.4.107 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103685
- http://www.securitytracker.com/id/1040757
- https://www.symantec.com/security-center/network-protection-security-advisories/SA162
- http://www.securityfocus.com/bid/103685
- http://www.securitytracker.com/id/1040757
- https://www.symantec.com/security-center/network-protection-security-advisories/SA162