CVE-2007-0563: XSS
First published: Tue Jan 30 2007(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Web Security | =3.01.62 | |
| Symantec Web Security | =3.01.61 | |
| Symantec Web Security | =3.0.1.72 | |
| Symantec Web Security | =3.01.68 | |
| Symantec Web Security | =3.01.60 | |
| Symantec Web Security | =3.01.67 | |
| Symantec Web Security | =3.01.63 | |
| Symantec Web Security | =3.01.59 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html
- http://secunia.com/advisories/23896
- http://www.securityfocus.com/bid/22184
- http://securitytracker.com/id?1017558
- http://osvdb.org/32960
- http://osvdb.org/32961
- http://www.vupen.com/english/advisories/2007/0330
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31750
Frequently Asked Questions
What is the severity of CVE-2007-0563?
CVE-2007-0563 has been categorized as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I fix CVE-2007-0563?
To fix CVE-2007-0563, users should update Symantec Web Security to the latest version available, specifically version 3.0.1.85 or higher.
What types of attacks can CVE-2007-0563 enable?
CVE-2007-0563 can enable attackers to perform cross-site scripting (XSS) attacks, allowing them to inject arbitrary web scripts or HTML.
Which versions of Symantec Web Security are affected by CVE-2007-0563?
CVE-2007-0563 affects multiple versions of Symantec Web Security, including versions 3.01.59 through 3.01.68 before 3.0.1.85.
Are there any workarounds for CVE-2007-0563?
Currently, the best workaround for CVE-2007-0563 is to apply the patch by upgrading to the fixed version, as no temporary workarounds are recommended.
- collector/nvd-historical
- collector/nvd-index
- agent/softwarecombine
- agent/remedy
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/description
- agent/tags
- agent/source
- vendor/symantec
- canonical/symantec web security
- version/symantec web security/3.01.62
- version/symantec web security/3.01.61
- version/symantec web security/3.0.1.72
- version/symantec web security/3.01.68
- version/symantec web security/3.01.60
- version/symantec web security/3.01.67
- version/symantec web security/3.01.63
- version/symantec web security/3.01.59