Symantec

Records598All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical93CVSS 9.0–10.0

CVSS high193CVSS 7.0–8.9

Exploited now

Symantec records in CISA KEV

TI-2017-04157 Symantec Messaging Gateway Remote Code Execution Vulnerability CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Endpoint Protection 71 records CRITICAL Norton Antivirus 67 records HIGH Endpoint Protection Manager 41 records HIGH Norton Internet Security 40 records HIGH Web Gateway 35 records HIGH Client Security 27 records CRITICAL Messaging Gateway 25 records HIGH Altiris Deployment Solution 24 records HIGH

Records

35 records in Web Gateway · all components

TI-2012-00284 CVE-2012-0297 · GHSA-ww7c-5x66-rfwr

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict…

HIGH 81

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) includi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.72955 Published 2012-05-21 No fix listed CWE-264

TI-2012-02563 CVE-2012-2953 · GHSA-vxg9-3cxj-rj2h

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote…

HIGH 79

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.67389 Published 2012-07-23 No fix listed CWE-78

TI-2012-00286 CVE-2012-0299 · GHSA-m49c-56fp-p4wc

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before…

HIGH 78

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vecto…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6372 Published 2012-05-21 No fix listed CWE-264

TI-2012-02566 CVE-2012-2957 · GHSA-fc3m-8f73-v5rj

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users…

HIGH 66

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.59287 Published 2012-07-23 No fix listed CWE-264

TI-2014-06068 CVE-2014-7285 · GHSA-jrrc-8w3m-x99x

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows…

MEDIUM 60

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.50324 Published 2014-12-17 No fix listed CWE-77

TI-2013-04386 CVE-2013-5017 · GHSA-j3f3-6rc8-9pf9

SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1…

MEDIUM 52

SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06958 Published 2014-06-18 No fix listed

TI-2012-02583 CVE-2012-2976 · GHSA-hrfm-9h96-v293

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote…

MEDIUM 51

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05354 Published 2012-07-23 No fix listed CWE-78

TI-2013-01423 CVE-2013-1616 · GHSA-h6vj-hgf8-4cf9

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows…

MEDIUM 49

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script.

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.10747 Published 2013-07-31 No fix listed CWE-78

TI-2016-04609 CVE-2016-5313 · GHSA-97j9-jggv-92q2

Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.

MEDIUM 46

Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04605 Published 2017-04-12 No fix listed CWE-78

TI-2015-05496 CVE-2015-6547 · GHSA-mqpp-vvj7-59f3

The management console on Symantec Web Gateway (SWG) appliances with software before…

MEDIUM 43

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.

CVSS 2.0HIGH 8.3 Network Low privileges Interaction — EPSS 0.0432 Published 2015-09-20 No fix listed CWE-77

TI-2015-04796 CVE-2015-5690 · GHSA-74xp-r998-p3xg

The management console on Symantec Web Gateway (SWG) appliances with software before…

MEDIUM 43

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveragi…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.03505 Published 2015-09-20 No fix listed CWE-78

TI-2015-04798 CVE-2015-5692 · GHSA-vj6m-2wv6-8fgp

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances…

MEDIUM 42

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe e…

CVSS 2.0HIGH 7.9 Network Low privileges Interaction — EPSS 0.05122 Published 2015-09-20 No fix listed CWE-264

TI-2015-04799 CVE-2015-5693 · GHSA-ww35-r2cx-vqr3

The management console on Symantec Web Gateway (SWG) appliances with software before…

MEDIUM 41

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via vectors related to "traffic capture."

CVSS 2.0HIGH 7.9 Network Low privileges Interaction — EPSS 0.0402 Published 2015-09-20 No fix listed CWE-94

TI-2013-01424 CVE-2013-1617 · GHSA-pm86-q2qv-75mx

Multiple SQL injection vulnerabilities in the management console on the Symantec Web…

MEDIUM 41

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vector…

CVSS 2.0HIGH 7.4 Adjacent network Low privileges Interaction — EPSS 0.05657 Published 2013-07-31 No fix listed CWE-89

TI-2012-00285 CVE-2012-0298 · GHSA-j72c-xffj-qrgx

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before…

MEDIUM 40

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.09333 Published 2012-05-21 No fix listed CWE-264

TI-2012-02569 CVE-2012-2961 · GHSA-885j-vr6m-j23g

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x…

LOW 38

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02455 Published 2012-07-23 No fix listed CWE-89

TI-2011-00475 CVE-2011-0549 · GHSA-w9cr-6gj4-6mgj

SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway…

LOW 37

SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02237 Published 2011-07-11 No fix listed CWE-89

TI-2010-00110 CVE-2010-0115 · GHSA-c2cv-ghmr-h386

SQL injection vulnerability in login.php in the GUI management console in Symantec Web…

LOW 37

SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02364 Published 2011-01-14 No fix listed CWE-89

TI-2016-04605 CVE-2016-5309 · GHSA-v822-2p42-8376

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced…

LOW 35

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.06877 Published 2017-04-14 No fix listed CWE-125

TI-2012-03567 CVE-2012-4178 · GHSA-xhr4-2jjv-2g88

SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web…

LOW 35

SQL injection vulnerability in spywall/includes/deptUploads_data.php in Symantec Web Gateway 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via the groupid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01237 Published 2012-08-07 No fix listed CWE-89

TI-2012-02233 CVE-2012-2574 · GHSA-w7rc-8rcf-m5v6

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x…

LOW 35

SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to a "blind SQL injection" is…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01229 Published 2012-07-23 No fix listed CWE-89

TI-2013-04095 CVE-2013-4672 · GHSA-9pwg-54q3-m94v

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an…

LOW 34

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.

CVSS 2.0HIGH 7.2 Adjacent network Low privileges Interaction — EPSS 0.01108 Published 2013-07-31 No fix listed CWE-264

TI-2016-04606 CVE-2016-5310 · GHSA-7fgm-h923-mw4g

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced…

LOW 33

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.05307 Published 2017-04-14 No fix listed CWE-787

TI-2013-04381 CVE-2013-5012 · GHSA-rrgh-xx2w-2xvx

Multiple SQL injection vulnerabilities in the management console on the Symantec Web…

LOW 32

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01515 Published 2014-02-11 No fix listed CWE-89

TI-2013-04094 CVE-2013-4671 · GHSA-hgf7-p26c-34xx

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02652 Published 2013-07-31 No fix listed CWE-352

Open these records in search →

Critical	93
High	193
Medium	271
Low	41
No CVSS	0