Web Gateway Appliance 8490

web_gateway_appliance_8490

Vendor: Symantec • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-4673 1Symantec 3Web Gateway Web Gateway Appliance 8450Web Gateway Appliance 8490 Apr 29, 2026 Aug 1, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login...Show more The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.Show less
CVE-2013-4672 1Symantec 3Web Gateway Web Gateway Appliance 8450Web Gateway Appliance 8490 Apr 29, 2026 Aug 1, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.
CVE-2013-4671 1Symantec 3Web Gateway Web Gateway Appliance 8450Web Gateway Appliance 8490 Apr 29, 2026 Aug 1, 2013 N/A· v4 N/A· v3 6.0 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via...Show more Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.Show less
CVE-2013-4670 1Symantec 3Web Gateway Web Gateway Appliance 8450Web Gateway Appliance 8490 Apr 29, 2026 Aug 1, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...Show more Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-1617 1Symantec 3Web Gateway Web Gateway Appliance 8450Web Gateway Appliance 8490 Apr 29, 2026 Aug 1, 2013 N/A· v4 N/A· v3 7.4 HIGH· v2 Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vector...Show more Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.Show less
CVE-2013-1616 1Symantec 3Web Gateway Web Gateway Appliance 8450Web Gateway Appliance 8490 Apr 29, 2026 Aug 1, 2013 N/A· v4 N/A· v3 8.3 HIGH· v2 The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script.