CVE-2014-7285
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting…
published December 17, 2014
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.
What it is
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.50324 · 98.9th percentile
- Published
- 2014-12-17T16:00Z
EPSS history
Timeline