VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 30, 2019· Updated Jun 17, 2026

CVE-2018-18370

CVE-2018-18370

Description

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) vulnerability in the WebFTP mode allows a remote attacker to inject malicious JavaScript code in ASG/ProxySG's web listing of a remote FTP server. Exploiting the vulnerability requires the attacker to be able to upload crafted files to the remote FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.

Affected products

7
  • Broadcom Corporation/Advanced Secure Gateway2 versions
    cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*range: >=6.7,<6.7.4.2
    • cpe:2.3:a:broadcom:advanced_secure_gateway:6.6:*:*:*:*:*:*:*
  • Broadcom Corporation/Symantec Proxysg2 versions
    cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*range: >=6.5,<6.5.10.15
    • cpe:2.3:a:broadcom:symantec_proxysg:6.6:*:*:*:*:*:*:*
  • Symantec/ASG/ProxySGllm-fuzzy
    Range: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2
  • Symantec Corporation/Symantec Advanced Secure Gateway (ASG)v5
    Range: 6.6 and 6.7 prior to 6.7.4.2
  • Symantec Corporation/Symantec ProxySGv5
    Range: 6.5 prior to 6.5.10.15

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.