[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVno3G5U5itwWR0IXMVc4UIFg_LDeY79aFQ2EZ_6XuEw":3,"g5a-ex:symantec\u002Fweb_security@*":136,"g5a-family:symantec\u002Fweb_security":138},{"success":4,"data":5},true,{"product":6,"versions":53,"topVulnerabilitiesByEpss":71,"kevVulnerabilities":114,"seoMetadata":115,"meta":134},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":52},"symantec","web_security",17,7,0,"2007-10-05",[14,18,20,22,25,27,29,31,33,35,37,40,42,44,46,48,50],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.5",3,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.0",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.1",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.59",5,{"version":26,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.60",{"version":28,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.61",{"version":30,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.62",{"version":32,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.63",{"version":34,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.67",{"version":36,"cve_count":24,"kev_count":11,"has_kev":17},"3.01.68",{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},"3.0.1.70",2,{"version":41,"cve_count":39,"kev_count":11,"has_kev":17},"3.0.1.72",{"version":43,"cve_count":39,"kev_count":11,"has_kev":17},"3.0.1.76",{"version":45,"cve_count":39,"kev_count":11,"has_kev":17},"3.0.1_build_3.01.70",{"version":47,"cve_count":39,"kev_count":11,"has_kev":17},"3.0.1_build_3.01.72",{"version":49,"cve_count":39,"kev_count":11,"has_kev":17},"3.0.1_build_3.01.74",{"version":51,"cve_count":39,"kev_count":11,"has_kev":17},"5.0","Web Security by Symantec is a technology product with 17 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":24,"kev_count":11,"has_kev":17},{"version":28,"cve_count":24,"kev_count":11,"has_kev":17},{"version":30,"cve_count":24,"kev_count":11,"has_kev":17},{"version":32,"cve_count":24,"kev_count":11,"has_kev":17},{"version":34,"cve_count":24,"kev_count":11,"has_kev":17},{"version":36,"cve_count":24,"kev_count":11,"has_kev":17},{"version":38,"cve_count":39,"kev_count":11,"has_kev":17},{"version":41,"cve_count":39,"kev_count":11,"has_kev":17},{"version":43,"cve_count":39,"kev_count":11,"has_kev":17},{"version":45,"cve_count":39,"kev_count":11,"has_kev":17},{"version":47,"cve_count":39,"kev_count":11,"has_kev":17},{"version":49,"cve_count":39,"kev_count":11,"has_kev":17},{"version":51,"cve_count":39,"kev_count":11,"has_kev":17},[72,80,86,90,97,102,109],{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":17,"epssScore":79},"CVE-2005-0249","Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.","2005-02-08",7.5,"v2","High",0.18832,{"cveId":81,"description":82,"publishedDate":12,"cvssScore":83,"cvssVersion":77,"severity":84,"isKev":17,"epssScore":85},"CVE-2007-0447","Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.",9.3,"Critical",0.05957,{"cveId":87,"description":88,"publishedDate":12,"cvssScore":83,"cvssVersion":77,"severity":84,"isKev":17,"epssScore":89},"CVE-2007-3699","The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.",0.03914,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":77,"severity":95,"isKev":17,"epssScore":96},"CVE-2007-0563","Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.","2007-01-30",4.3,"Medium",0.02132,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":94,"cvssVersion":77,"severity":95,"isKev":17,"epssScore":101},"CVE-2004-2755","Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.","2004-12-31",0.01955,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":77,"severity":107,"isKev":17,"epssScore":108},"CVE-2005-1346","Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV\u002FFilter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.","2005-05-02",2.6,"Low",0.01491,{"cveId":110,"description":111,"publishedDate":93,"cvssScore":112,"cvssVersion":77,"severity":95,"isKev":17,"epssScore":113},"CVE-2007-0564","The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file.",4,0.01056,[],{"title":116,"metaDescription":117,"keywords":118,"structuredData":119},"Web Security by Symantec - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Web Security by Symantec covering 17 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Web Security vulnerabilities, Web Security security, Web Security CVE, Symantec Web Security, Web Security threat intelligence, Symantec security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":120,"@type":121,"name":122,"description":117,"url":123,"manufacturer":124,"applicationCategory":128,"softwareVersion":129,"mainEntity":130},"https:\u002F\u002Fschema.org","SoftwareApplication","Web Security","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsymantec\u002Fweb_security",{"@type":125,"name":126,"url":127},"Organization","Symantec","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsymantec","Security Software","17 versions tracked",{"@type":131,"name":132,"description":133,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Web Security Security Vulnerabilities","Security vulnerabilities affecting Web Security by Symantec",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":135,"apiVersion":19},"2026-10-17T14:25:29.847Z",{"rows":137,"total":11,"capped":17,"failed":11},[],[]]