Unrated severityNVD Advisory· Published May 21, 2012· Updated Apr 29, 2026

CVE-2012-0297

Description

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.

Affected products

Symantec/Web Gateway3 versions
cpe:2.3:a:symantec:web_gateway:5.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:symantec:web_gateway:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:web_gateway:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:web_gateway:5.0.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.symantec.com/security_response/securityupdates/detail.jspnvdVendor Advisory
www.securityfocus.com/bid/53444nvd
exchange.xforce.ibmcloud.com/vulnerabilities/75731nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.072
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000