CVE-2012-0297

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

72.60%

Published

May 21, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBSymantec Web Gateway 5.0.2.8 - Command Execution (Metasploit)Exploit-DBSymantec Web Gateway 5.0.2 - Local/Remote File Inclusion / Remote Code Execution Exploit-DBsymantec Web gateway 5.0.2.8 - Multiple Vulnerabilities Exploit-DBSymantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.

Weaknesses (CWE)

CWE-264

Affected Products (3)

symantec · web_gatewayvulnerable

References (6)

http://www.securityfocus.com/bid/53444

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/75731

http://www.securityfocus.com/bid/53444

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/75731

KEV Catalog EPSS Scores Vendors All CVEs