VULNERABILITY INTELLIGENCE
CVE-2012-2976
CVSS score10 HIGH
EPSS probability5.35%
CISA KEVNot currently listed
Published2012-07-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')