CVE-2017-13678: XSS
Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-13678?
CVE-2017-13678 refers to a stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles.
How does CVE-2017-13678 impact the affected software?
CVE-2017-13678 allows a malicious appliance administrator to inject arbitrary JavaScript code in the management console web client application.
Which software versions are affected by CVE-2017-13678?
CVE-2017-13678 affects Broadcom Advanced Secure Gateway versions 6.6 to 6.6.5.14, 6.7.3 to 6.7.3.7, and 6.7.4 to 6.7.4.107, as well as Broadcom Symantec Proxysg versions 6.5 to 6.5.10.8, 6.6 to 6.6.5.14, 6.7.3 to 6.7.3.7, and 6.7.4 to 6.7.4.107.
What is the severity of CVE-2017-13678?
CVE-2017-13678 has a medium severity rating with a CVSS score of 4.8.
How can I fix the CVE-2017-13678 vulnerability?
To fix the CVE-2017-13678 vulnerability, it is recommended to update the affected software to the latest patched version provided by Broadcom.