CVE-2013-5013: XSS
First published: Tue Feb 11 2014(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via (1) vectors involving PHP scripts and (2) unspecified other vectors.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Web Gateway | <=5.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the risks associated with CVE-2013-5013?
CVE-2013-5013 can allow remote attackers to inject arbitrary web scripts or HTML, leading to potential data theft and session hijacking.
How can I determine if my Symantec Web Gateway is affected by CVE-2013-5013?
If your version of Symantec Web Gateway is prior to 5.2, it is likely affected by CVE-2013-5013.
What steps should I take to remediate CVE-2013-5013?
The recommended fix for CVE-2013-5013 is to upgrade to Symantec Web Gateway version 5.2 or later.
What types of attacks can result from CVE-2013-5013?
CVE-2013-5013 can lead to Cross-Site Scripting (XSS) attacks, allowing attackers to execute malicious scripts in the context of the user's browser.
Is there a specific vector through which CVE-2013-5013 can be exploited?
CVE-2013-5013 may be exploited via PHP scripts and potentially other unspecified vectors in the management console.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/symantec
- canonical/symantec web gateway
- version/symantec web gateway/5.1.1