[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1DdWlMLemaEud3sluInmA4unnVF8p1uVqxISOzilV5Q":3,"g5a-ex:symantec\u002Fweb_gateway@*":165,"g5a-family:symantec\u002Fweb_gateway":167},{"success":4,"data":5},true,{"product":6,"versions":61,"topVulnerabilitiesByEpss":82,"kevVulnerabilities":142,"seoMetadata":143,"meta":162},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":60},"symantec","web_gateway",20,35,0,"2017-04-14",[14,18,21,23,25,27,29,31,33,35,37,39,42,44,46,49,52,54,56,58],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.5",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.0.325",1,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"4.5.0.326",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.0.327",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.1.34",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.1.44",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.2.37",{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.2.65",{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.2.72",{"version":36,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.3.38",{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},"4.5.4.9",{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},"5.0",16,{"version":43,"cve_count":41,"kev_count":11,"has_kev":17},"5.0.1",{"version":45,"cve_count":41,"kev_count":11,"has_kev":17},"5.0.2",{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"5.0.3",12,{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"5.0.3.18",7,{"version":53,"cve_count":16,"kev_count":11,"has_kev":17},"5.1",{"version":55,"cve_count":11,"kev_count":11,"has_kev":17},"5.1.1",{"version":57,"cve_count":11,"kev_count":11,"has_kev":17},"5.2",{"version":59,"cve_count":11,"kev_count":11,"has_kev":17},"5.2.1","Web Gateway by Symantec is a technology product with 20 tracked versions and 35 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},{"version":34,"cve_count":20,"kev_count":11,"has_kev":17},{"version":36,"cve_count":20,"kev_count":11,"has_kev":17},{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},{"version":43,"cve_count":41,"kev_count":11,"has_kev":17},{"version":45,"cve_count":41,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":16,"kev_count":11,"has_kev":17},{"version":55,"cve_count":11,"kev_count":11,"has_kev":17},{"version":57,"cve_count":11,"kev_count":11,"has_kev":17},{"version":59,"cve_count":11,"kev_count":11,"has_kev":17},[83,91,96,100,106,113,119,124,131,137],{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":90},"CVE-2012-0297","The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.","2012-05-21",10,"v2","Critical",0.72955,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":95},"CVE-2012-2953","The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.","2012-07-23",0.67389,{"cveId":97,"description":98,"publishedDate":86,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":99},"CVE-2012-0299","The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.",0.6372,{"cveId":101,"description":102,"publishedDate":94,"cvssScore":103,"cvssVersion":88,"severity":104,"isKev":17,"epssScore":105},"CVE-2012-2957","The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a \"file inclusion\" issue.",7.2,"High",0.59287,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":88,"severity":111,"isKev":17,"epssScore":112},"CVE-2014-7285","The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.","2014-12-17",6.5,"Medium",0.50324,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":88,"severity":104,"isKev":17,"epssScore":118},"CVE-2013-1616","The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script.","2013-08-01",8.3,0.10747,{"cveId":120,"description":121,"publishedDate":86,"cvssScore":122,"cvssVersion":88,"severity":111,"isKev":17,"epssScore":123},"CVE-2012-0298","The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vectors.",6.4,0.09333,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":129,"severity":89,"isKev":17,"epssScore":130},"CVE-2013-5017","SNMPConfig.php in the management console in Symantec Web Gateway (SWG) before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors.","2014-06-18",9.8,"v3.0",0.06958,{"cveId":132,"description":133,"publishedDate":12,"cvssScore":134,"cvssVersion":135,"severity":111,"isKev":17,"epssScore":136},"CVE-2016-5309","The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE\u002FSEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows\u002FMac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.",5.5,"v3.1",0.06877,{"cveId":138,"description":139,"publishedDate":116,"cvssScore":140,"cvssVersion":88,"severity":104,"isKev":17,"epssScore":141},"CVE-2013-1617","Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.",7.4,0.05657,[],{"title":144,"metaDescription":145,"keywords":146,"structuredData":147},"Web Gateway by Symantec - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Web Gateway by Symantec covering 20 versions with 35 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Web Gateway vulnerabilities, Web Gateway security, Web Gateway CVE, Symantec Web Gateway, Web Gateway threat intelligence, Symantec security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":148,"@type":149,"name":150,"description":145,"url":151,"manufacturer":152,"applicationCategory":156,"softwareVersion":157,"mainEntity":158},"https:\u002F\u002Fschema.org","SoftwareApplication","Web Gateway","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsymantec\u002Fweb_gateway",{"@type":153,"name":154,"url":155},"Organization","Symantec","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsymantec","Security Software","20 versions tracked",{"@type":159,"name":160,"description":161,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Web Gateway Security Vulnerabilities","Security vulnerabilities affecting Web Gateway by Symantec",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":163,"apiVersion":164},"2026-10-17T13:16:13.982Z","3.0",{"rows":166,"total":11,"capped":17,"failed":11},[],[168,171,173],{"product":169,"cves":170},"web_gateway_appliance_8450",6,{"product":172,"cves":170},"web_gateway_appliance_8490",{"product":174,"cves":20},"web_gateway_appliance"]