VULNERABILITY INTELLIGENCE

CVE-2004-0192

CVSS score6.8 MEDIUM
EPSS probability4.48%
CISA KEVNot currently listed
Published2004-03-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.

Primary references