NVD

Id
37796  
Name
CVE-2013-1617  
Description
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.4  
Severity
High  
CVSS Base Score
7.4  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-08-01  
Modified Date
2014-01-17  
Seq
2013-1617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192436 37796 CVE-2013-1617 http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html  View
192437 37796 CVE-2013-1617 61101  View
192438 37796 CVE-2013-1617 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00  View
192439 37796 CVE-2013-1617 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22044 JVNDB-2013-003619 Symantec Web Gateway アプライアンスの管理コンソールにおける SQL インジェクションの脆弱性 Symantec Web Gateway (SWG) アプライアンスの管理コンソールには、SQL インジェクションの脆弱性が存在します。 CVE-2013-1617 61559 CVE-2013-1617 37796 7.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003619.html 2013-07-25 2013-08-02 View