Symantec Proxysg
Vendor:
First CVE: May 11, 2017 · Active for 9 years
13
Total CVEs
More Total CVEs than 92% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Symantec Proxysg over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 11, 2017
9 years ago
Most Recent CVE
Jun 30, 2021
1,854 days ago
CVE Severity & Scoring
Symantec Proxysg13 CVEs
62%
23%
15%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (7.7%)
Network12 (92.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (53.8%)
Unknown0 (0.0%)
Required6 (46.2%)
Privileges Required
Low2 (15.4%)
High3 (23.1%)
None8 (61.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-5241CRITICAL Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with | May 29, 2018 | 9.8 | 31 | NO | NO |
CVE-2021-30648CRITICAL The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute ar | Jun 30, 2021 | 9.8 | 28 | NO | NO |
CVE-2016-10258MEDIUM Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malic | Apr 11, 2018 | 6.8 | 28 | NO | YES |
CVE-2017-13677HIGH Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause | Apr 11, 2018 | 7.5 | 24 | NO | NO |
CVE-2019-18375MEDIUM The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the s | Apr 10, 2020 | 6.5 | 23 | NO | NO |
CVE-2018-18370MEDIUM The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) | Aug 30, 2019 | 6.1 | 22 | NO | NO |
CVE-2018-18371MEDIUM The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerabi | Aug 30, 2019 | 6.5 | 21 | NO | NO |
CVE-2016-9100HIGH Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3 | May 11, 2017 | 7.8 | 20 | NO | NO |
CVE-2016-10257MEDIUM The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is s | Jan 10, 2018 | 6.1 | 19 | NO | NO |
CVE-2016-9097HIGH The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do n | May 11, 2017 | 7.2 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.7% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Symantec Proxysg
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.7.1.1 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.7 | 2 | 8.5 | 3.6% | 0 | 0 |
| 6.6.5 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.4.3 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.4.1 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.4 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.3.2 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.3 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.2.2 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.2.1 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6.2 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.6 | 7 | 6.8 | 1.9% | 0 | 0 |
| 6.5.9.8 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.9.2 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.9.14 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.9.10 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.7.6 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.6.1 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.5.7 | 1 | 7.2 | 2.4% | 0 | 0 |
| 6.5.4.1 | 1 | 7.2 | 2.4% | 0 | 0 |