Skip to content
OpenAdvisories
Medium WID-SEC-2023-0106 1 CVE

Trellix Secure Web Gateway: Schwachstelle ermöglicht Cross-Site Scripting

Published Jan 17, 2023 · Updated Jan 17, 2023 · de-DE

Vendor: Trellix Product: Secure Web Gateway Product: Secure Web Gateway < 10.2.17 Product: Secure Web Gateway < 11.2.6 Product: Secure Web Gateway < 12.0.1

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Trellix Secure Web Gateway ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Trellix Secure Web Gateway ist eine Web Security Appliance.

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-0214 Public exploit

    XSS in Skyhigh Security SWG

    A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party we…

    Skyhigh Security Secure Web Gateway (SWG)

Revision history

  1. #1

    Initiale Fassung

References