CVE-2014-1652

Multiple cross-site scripting (XSS) vulnerabilities in the management console in Symantec Web Gateway (SWG) before 5.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified report parameters.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_gateway:5.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-06-18 19:55

Updated : 2024-02-28 12:20


NVD link : CVE-2014-1652

Mitre link : CVE-2014-1652

CVE.ORG link : CVE-2014-1652


JSON object : View

Products Affected

symantec

  • web_gateway
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')