CVE-2004-2755

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.

Affected products

Symantec Web Security: 2.5, 3.0, 3.0.1

References

http://secunia.com/advisories/10618
http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html
http://www.osvdb.org/6754
http://www.securityfocus.com/bid/9418
http://www.securitytracker.com/alerts/2004/Jan/1008711.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/14825
http://secunia.com/advisories/10618
http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html
http://www.osvdb.org/6754
http://www.securityfocus.com/bid/9418
http://www.securitytracker.com/alerts/2004/Jan/1008711.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/14825

Get alerted when CVE-2004-2755 or the next vulnerability affects your stack