CVE-2007-0563

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-30 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.

Affected products

Symantec Web Security: 3.0.1.72, 3.01.59, 3.01.60, 3.01.61, 3.01.62, 3.01.63 (+2)

References

http://osvdb.org/32960
http://osvdb.org/32961
http://secunia.com/advisories/23896
http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html
http://securitytracker.com/id?1017558
http://www.securityfocus.com/bid/22184
http://www.vupen.com/english/advisories/2007/0330
https://exchange.xforce.ibmcloud.com/vulnerabilities/31750
http://osvdb.org/32960
http://osvdb.org/32961
http://secunia.com/advisories/23896
http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html

Get alerted when CVE-2007-0563 or the next vulnerability affects your stack