description: Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.
problem types: Stored XSS
affected:
{
product: Advanced Secure Gateway (ASG)
vendor: Symantec Corporation
versions:
status: affected, version: 6.6 prior to 6.6.5.14
status: affected, version: 6.7 prior to 6.7.4.107
}
{
product: ProxySG
vendor: Symantec Corporation
versions:
status: affected, version: 6.5 prior to 6.5.10.8
status: affected, version: 6.6 prior to 6.6.5.14
status: affected, version: 6.7 prior to 6.7.4.107
}
