CVE-2012-0299

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 63.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-05-21 · updated 2026-06-16
Weakness: CWE-264

Description

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.

Affected products

Symantec Web Gateway: 5.0, 5.0.1, 5.0.2

References

http://www.securityfocus.com/bid/53443
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/75730
http://www.securityfocus.com/bid/53443
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/75730

Get alerted when CVE-2012-0299 or the next vulnerability affects your stack