Show plain JSON{"id": "CVE-2013-5013", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-02-11T02:55:08.617", "references": [{"url": "http://osvdb.org/103144", "source": "secure@symantec.com"}, {"url": "http://osvdb.org/103145", "source": "secure@symantec.com"}, {"url": "http://osvdb.org/103147", "source": "secure@symantec.com"}, {"url": "http://www.securityfocus.com/bid/65405", "source": "secure@symantec.com"}, {"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140210_00", "tags": ["Vendor Advisory"], "source": "secure@symantec.com"}, {"url": "http://osvdb.org/103144", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/103145", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/103147", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/65405", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140210_00", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via (1) vectors involving PHP scripts and (2) unspecified other vectors."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de XSS en la consola de administraci\u00f3n del appliance Symantec Web Gateway (SWG) anterior a 5.2 permite a atacantes remotos inyectar script Web o HTML arbitrario a trav\u00e9s de (1) vectores que involucran scripts PHP y (2) otros vectores no especificados."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C46F03C-FE3F-4939-90FA-7D454686778F", "versionEndIncluding": "5.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "secure@symantec.com"} 