{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-27T16:24:08.754","vulnerabilities":[{"cve":{"id":"CVE-2017-13678","sourceIdentifier":"secure@symantec.com","published":"2018-04-11T14:29:00.377","lastModified":"2024-11-21T03:11:24.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application."},{"lang":"es","value":"Vulnerabilidad de Cross-Site Scripting (XSS) persistente en las consolas de gestión Symantec Advanced Secure Gateway (ASG) y ProxySG. Un administrador de aparatos malicioso puede inyectar código JavaScript arbitrario en la aplicación cliente de la consola de gestión web."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6","versionEndExcluding":"6.6.5.14","matchCriteriaId":"EF86C5BD-ABB2-4B5D-901D-42153FB2ED15"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.3","versionEndExcluding":"6.7.3.7","matchCriteriaId":"1D365F8C-3F0E-4596-9AE0-840E966E7E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.4","versionEndExcluding":"6.7.4.107","matchCriteriaId":"FCD17841-CC52-427D-9B77-B3787276D1FE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.5.10.8","matchCriteriaId":"71233B55-5E11-42A3-AE39-EAD381E32607"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6","versionEndExcluding":"6.6.5.14","matchCriteriaId":"2D262D81-F928-4847-87C8-D20849ABA94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.3","versionEndExcluding":"6.7.3.7","matchCriteriaId":"A161CEF7-078D-400B-82FF-F4CCD5561F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.4","versionEndExcluding":"6.7.4.107","matchCriteriaId":"F473B1BD-A298-4809-AAB1-E7B520AA5222"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/103685","source":"secure@symantec.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040757","source":"secure@symantec.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.symantec.com/security-center/network-protection-security-advisories/SA162","source":"secure@symantec.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.symantec.com/security-center/network-protection-security-advisories/SA162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}