VULNERABILITY INTELLIGENCE

CVE-2011-0549

CVSS score7.5 HIGH

EPSS probability2.24%

CISA KEVNot currently listed

Published2011-07-11

Last modified2026-06-16

Description

SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary SQL commands via the username parameter.