CVE Vulnerability

CVE-2007-0563

Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html Patch Vendor Advisory
http://secunia.com/advisories/23896 Patch Vendor Advisory
http://www.securityfocus.com/bid/22184
http://securitytracker.com/id?1017558
http://osvdb.org/32960
http://osvdb.org/32961
http://www.vupen.com/english/advisories/2007/0330
https://exchange.xforce.ibmcloud.com/vulnerabilities/31750
Configurations

Configuration 1

cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.0.1.72:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*
Information

Published : 2007-01-30 04:28

Updated : 2017-07-29 01:30

NVD link : CVE-2007-0563

Mitre link : CVE-2007-0563

Products Affected
No products.
CWE
NVD-CWE-Other