What is CVE-2016-10256?

CVE-2016-10256 is a reflected XSS vulnerability in the Symantec ProxySG management console.

What is the severity of CVE-2016-10256?

CVE-2016-10256 has a severity rating of 6.1 (Medium).

What software versions are affected by CVE-2016-10256?

Symantec ProxySG versions 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) are affected by CVE-2016-10256.

How can I fix CVE-2016-10256?

To fix CVE-2016-10256, update the Symantec ProxySG management console to version 6.5.10.6, 6.7.2.1, or later.

Vulnerability/
CVE-2016-10256

medium

6.1

CWE

10/1/2018

17/9/2024

CVE-2016-10256: XSS

Q: How can a remote attacker exploit CVE-2016-10256?

A remote attacker can exploit CVE-2016-10256 by using a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client.

First published: Wed Jan 10 2018(Updated: )

The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10257.

Credit: secure@symantec.com

Affected Software	Affected Version	How to fix
Broadcom ProxySG	>=6.5<6.5.10.6
Broadcom ProxySG	>=6.7<6.7.2.1
Broadcom ProxySG	=6.6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2016-10256?
CVE-2016-10256 is a reflected XSS vulnerability in the Symantec ProxySG management console.
How can a remote attacker exploit CVE-2016-10256?
A remote attacker can exploit CVE-2016-10256 by using a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client.
What is the severity of CVE-2016-10256?
CVE-2016-10256 has a severity rating of 6.1 (Medium).
What software versions are affected by CVE-2016-10256?
Symantec ProxySG versions 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) are affected by CVE-2016-10256.
How can I fix CVE-2016-10256?
To fix CVE-2016-10256, update the Symantec ProxySG management console to version 6.5.10.6, 6.7.2.1, or later.

agent/type
agent/severity
agent/references
agent/author
agent/weakness
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/broadcom
canonical/broadcom proxysg
version/broadcom proxysg/6.5
version/broadcom proxysg/6.7
version/broadcom proxysg/6.6

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.