Advanced Secure Gateway
Vendor:
First CVE: May 11, 2017 · Active for 9 years
16
Total CVEs
More Total CVEs than 92% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Advanced Secure Gateway over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 11, 2017
9 years ago
Most Recent CVE
Jun 1, 2023
1,149 days ago
CVE Severity & Scoring
Advanced Secure Gateway16 CVEs
50%
31%
19%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (12.5%)
Network14 (87.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (62.5%)
Unknown0 (0.0%)
Required6 (37.5%)
Privileges Required
Low5 (31.3%)
High3 (18.8%)
None8 (50.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-5241CRITICAL Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with | May 29, 2018 | 9.8 | 31 | NO | NO |
CVE-2023-23952CRITICAL Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability. | Jun 1, 2023 | 9.8 | 29 | NO | NO |
CVE-2016-10258MEDIUM Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malic | Apr 11, 2018 | 6.8 | 28 | NO | YES |
CVE-2023-23955HIGH Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability. | Jun 1, 2023 | 8.1 | 24 | NO | NO |
CVE-2017-13677HIGH Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause | Apr 11, 2018 | 7.5 | 24 | NO | NO |
CVE-2023-23953HIGH Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability. | Jun 1, 2023 | 7.8 | 23 | NO | NO |
CVE-2021-46825CRITICAL Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through | Jul 7, 2022 | 9.1 | 23 | NO | NO |
CVE-2019-18375MEDIUM The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the s | Apr 10, 2020 | 6.5 | 23 | NO | NO |
CVE-2018-18370MEDIUM The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) | Aug 30, 2019 | 6.1 | 22 | NO | NO |
CVE-2018-18371MEDIUM The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerabi | Aug 30, 2019 | 6.5 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
6.2% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Advanced Secure Gateway
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.3 | 1 | 9.1 | 1.5% | 0 | 0 |
| 6.7 | 2 | 9.4 | 3.2% | 0 | 0 |
| 6.6.5.1 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.4.3 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.4 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.3 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6 | 6 | 7.0 | 2.0% | 0 | 0 |