Description
Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Symantec | Advanced Secure Gateway (ASG) | 6.6 prior to 6.6.5.14, 6.7 prior to 6.7.4.107 | — |
| Symantec | ProxySG | 6.5 prior to 6.5.10.8, 6.6 prior to 6.6.5.14, 6.7 prior to 6.7.4.107 | — |