CVE-2017-13678

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.1%

probabilidade de exploração

1.1%top 38% das CVEs

exploração observada

nãonenhuma fonte reporta

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.

Produtos afetados

Symantec Corporation · Advanced Secure Gateway (ASG)Symantec Corporation · ProxySG

Referências

https://www.symantec.com/security-center/network-protection-security-advisories/SA162 http://www.securityfocus.com/bid/103685 http://www.securitytracker.com/id/1040757