Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-10257

The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is s

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10256.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Symantec Corporation ASG

  • 6.6affected
  • 6.7 prior to 6.7.2.1affected

Symantec Corporation ProxySG

  • 6.5 prior to 6.5.10.6affected
  • 6.6affected
  • 6.7 prior to 6.7.2.1affected

References