CVE-2017-13678

Published: Apr 11, 2018Modified: Nov 21, 2024

4.8

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Exploitability: 1.7 / Impact: 2.7

Source: NVD

Description

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.

Affected (7)

Products: Broadcom: Advanced Secure Gateway, Symantec Proxysg

Broadcom

2 products

Advanced Secure Gateway

Symantec Proxysg

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Broadcom Advanced Secure Gateway	From 6.6 to 6.6.5.14
Broadcom Advanced Secure Gateway	From 6.7.3 to 6.7.3.7
Broadcom Advanced Secure Gateway	From 6.7.4 to 6.7.4.107

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Broadcom Symantec Proxysg	From 6.5 to 6.5.10.8
Broadcom Symantec Proxysg	From 6.6 to 6.6.5.14
Broadcom Symantec Proxysg	From 6.7.3 to 6.7.3.7
Broadcom Symantec Proxysg	From 6.7.4 to 6.7.4.107