CVE-2012-0297: symantec web_gateway
Vulnerability summary
CVE-2012-0297 is a high (CVSS 10.0) vulnerability in symantec web_gateway. EPSS estimates a 72.95% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 6 public exploits are recorded.
Timeline
- 21-05-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
72.95%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.36 pp
From 72.60% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
6 foundSymantec Web Gateway 5.0.2.8 ipchange.php Command Injection
exploit/linux/http/symantec_web_gateway_exec
Maturity: weaponized
Symantec Web Gateway 5.0.2.8 relfile File Inclusion Vulnerability
exploit/linux/http/symantec_web_gateway_lfi
Maturity: weaponized
Symantec Web Gateway 5.0.2.8 - Command Execution (Metasploit)
Maturity: weaponized
Show all 6 exploits
Symantec Web Gateway 5.0.2 - Local/Remote File Inclusion / Remote Code Execution
Maturity: poc
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
Maturity: poc
Symantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Symantec1 product
- web_gateway5.0 | 5.0.1 | 5.0.2
1 vendor · 1 product