GCVE - cpe:2.3:a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*

part: a version: 5.0.3 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Web Gateway (`c5dfd5f4-fbf1-5c76-91dd-f0cfd7d70283`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4673`	vulnerable	2026-06-08 05:04:49.097764	Details available The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt. Published: 2013-07-31T15:00:00.000Z Updated: 2024-08-06T16:52:27.319Z Open on db.gcve.eu Reference links http://osvdb.org/95702 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 http://www.securityfocus.com/bid/61105 https://exchange.xforce.ibmcloud.com/vulnerabilities/85990	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4672`	vulnerable	2026-06-08 05:04:49.097289	Details available The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command. Published: 2013-07-31T15:00:00.000Z Updated: 2024-08-06T16:52:27.154Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 http://www.securityfocus.com/bid/61104 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html http://osvdb.org/95695	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4671`	vulnerable	2026-06-08 05:04:49.096792	Details available Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Published: 2013-07-31T15:00:00.000Z Updated: 2024-08-06T16:52:27.150Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html http://www.securityfocus.com/bid/61102 http://osvdb.org/95699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4670`	vulnerable	2026-06-08 05:04:49.094664	Details available Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2013-07-31T15:00:00.000Z Updated: 2024-08-06T16:52:27.149Z Open on db.gcve.eu Reference links http://osvdb.org/95690 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 http://osvdb.org/95692 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt http://www.securityfocus.com/bid/61103	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1617`	vulnerable	2026-06-08 05:03:54.955608	Details available Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. Published: 2013-07-31T15:00:00.000Z Updated: 2024-08-06T15:04:49.613Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt http://www.securityfocus.com/bid/61101 http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1616`	vulnerable	2026-06-08 05:03:54.953190	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2977`	vulnerable	2026-06-08 05:02:07.506550	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2976`	vulnerable	2026-06-08 05:02:07.506162	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2961`	vulnerable	2026-06-08 05:02:07.410089	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2957`	vulnerable	2026-06-08 05:02:07.403318	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2953`	vulnerable	2026-06-08 05:02:07.393643	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2574`	vulnerable	2026-06-08 05:02:04.872772	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.