CVE-2017-13678

CVE-2017-13678: vulnerability in Symantec Corporation Advanced Secure Gateway…

Published · Updated

Follow this CVE+ Monitor ProxySG+ Monitor Advanced Secure Gateway

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.
Affected products
Symantec Corporation · Advanced Secure Gateway (ASG)Symantec Corporation · ProxySG
Related CVEs — Symantec Corporation Advanced Secure Gateway…

In the same product, most dangerous first.

CVE-2017-13677—CVE-2017-13677EPSS 5.0%CVE-2016-10258—CVE-2016-10258EPSS 4.8%CVE-2018-5241—CVE-2018-5241EPSS 4.4%CVE-2016-9099—CVE-2016-9099EPSS 1.8%CVE-2016-10257—CVE-2016-10257EPSS 1.5%CVE-2016-10256—CVE-2016-10256EPSS 1.5%