Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Vendor: Broadcom Component: Advanced Secure Gateway Clear all filters
TI-2023-09751 CVE-2023-23954 · GHSA-665m-vqmm-gg4v

Cross-site scripting in Advanced Secure Gateway, Content Analysis

Priority LOW 24

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00341 Published 2023-06-01 No fix listed CWE-79
TI-2023-09749 CVE-2023-23952 · GHSA-gjqm-p585-r974

Command injection in Advanced Secure Gateway, Content Analysis

Priority MEDIUM 51

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01301 Published 2023-06-01 No fix listed CWE-77
TI-2018-12988 CVE-2018-18370 · GHSA-m2px-9cv3-x8qj

Cross-site scripting in Symantec Advanced Secure Gateway

Priority LOW 29

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00772 Published 2019-08-29 Fixed in 6.5.10.15, 6.7.4.2 CWE-79
TI-2017-09956 CVE-2017-13678 · GHSA-ph7c-5vcg-x887

Cross-site scripting in Symantec Advanced Secure Gateway

Priority LOW 24

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01037 Published 2018-04-11 Fixed in 6.6.5.14, 6.7.4.107 +1 CWE-79
TI-2016-08332 CVE-2016-10258 · GHSA-8586-qhh3-x99v

Unrestricted file upload in Symantec Advanced Secure Gateway

Priority LOW 38

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles.

CVSS 3.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.04844 Published 2018-04-11 Fixed in 6.6.5.14, 6.7.3.1 +1 CWE-434
TI-2016-08331 CVE-2016-10257 · GHSA-vfc6-mrqm-f3vr

Cross-site scripting in Symantec ASG

Priority LOW 30

The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerabil…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01473 Published 2018-01-10 Fixed in 6.7.2.1, 6.5.10.6 CWE-79
TI-2016-07448 CVE-2016-9100 · GHSA-wp7p-m228-g97j

Credentials management flaw in Symantec ASG

Priority LOW 34

Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information dis…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00429 Published 2017-05-11 Fixed in 6.6.5.13, 6.7.3.1 +1 CWE-255
TI-2016-07447 CVE-2016-9099 · GHSA-r27c-c98m-6x4q

Open redirect in Symantec ASG

Priority LOW 31

Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01826 Published 2017-05-11 Fixed in 6.7.2.1, 6.5.10.6 CWE-601
TI-2016-07446 CVE-2016-9097 · GHSA-qjw8-fqfp-g4fh

Access control flaw in Symantec Advanced Secure Gateway and ProxySG

Priority LOW 36

The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correct…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02353 Published 2017-05-11 No fix listed CWE-264