Skip to content

CVE-2017-13678 Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management conso...

MediumCVSS 4.8 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.

Affected products

ProductAffected versionsFixed in
broadcom advanced secure gateway >= 6.6, < 6.6.5.14 6.6.5.14
broadcom advanced secure gateway >= 6.7.3, < 6.7.3.7 6.7.3.7
broadcom advanced secure gateway >= 6.7.4, < 6.7.4.107 6.7.4.107
broadcom symantec proxysg >= 6.5, < 6.5.10.8 6.5.10.8
broadcom symantec proxysg >= 6.6, < 6.6.5.14 6.6.5.14
broadcom symantec proxysg >= 6.7.3, < 6.7.3.7 6.7.3.7
broadcom symantec proxysg >= 6.7.4, < 6.7.4.107 6.7.4.107
symantec Advanced Secure Gateway (ASG) = 6.6 prior to 6.6.5.14 No fix listed
symantec Advanced Secure Gateway (ASG) = 6.7 prior to 6.7.4.107 No fix listed
symantec ProxySG = 6.5 prior to 6.5.10.8 No fix listed
symantec ProxySG = 6.6 prior to 6.6.5.14 No fix listed
symantec ProxySG = 6.7 prior to 6.7.4.107 No fix listed

References