VYPR
Unrated severityNVD Advisory· Published Sep 20, 2015· Updated Jun 17, 2026

CVE-2015-6548

CVE-2015-6548

Description

Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected products

2
  • cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*range: <=5.2.2
    • (no CPE)range: <5.2.2 DB 5.0.0.1277

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.