Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
content gateway vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2012-0307
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) prior to 10.0 allow remote malicious users to inject arbitrary web script or HTML via (1) web content or (2) e-mail content.
Symantec Messaging Gateway
Symantec Messaging Gateway 9.5.3
Symantec Messaging Gateway 9.5.2
Symantec Messaging Gateway 9.5.1
Symantec Messaging Gateway 9.5
4.3
CVSSv3
CVE-2021-23884
Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) before 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud S...
Mcafee Content Security Reporter
7.5
CVSSv3
CVE-2019-0319
The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an malicious user to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not.
Sap Ui5 1.0.0
Sap Gateway 7.51
Sap Gateway 7.53
Sap Gateway 7.52
Sap Gateway 7.5
NA
CVE-2009-0440
IBM WebSphere Partner Gateway (WPG) 6.0.0 up to and including 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet (aka RNIF) document to a backend application, related to (1) "altere...
Ibm Websphere Partner Gateway 6.0.0.3
Ibm Websphere Partner Gateway 6.0.0.5
Ibm Websphere Partner Gateway 6.0.0
Ibm Websphere Partner Gateway 6.0.0.7
Ibm Websphere Partner Gateway 6.0.0.1
Ibm Websphere Partner Gateway 6.0.0.6
Ibm Websphere Partner Gateway 6.0.0.2
Ibm Websphere Partner Gateway 6.0.0.4
5.4
CVSSv3
CVE-2020-10112
Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths, which implies ...
Citrix Gateway Firmware 11.1
Citrix Gateway Firmware 12.0
Citrix Gateway Firmware 12.1
NA
CVE-2008-2541
Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote malicious users to execute arbitrary code or cause a denial of service via long FTP responses, related to (1) the file month field in a LIST comman...
Ca Etrust Secure Content Manager 8.0
6.1
CVSSv3
CVE-2023-0214
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x before 11.2.6, 10.x before 10.2.17, and controlled release 12.x before 12.0.1 allows a remote malicious user to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitr...
Trellix Skyhigh Secure Web Gateway 12.0.0
Trellix Skyhigh Secure Web Gateway
NA
CVE-2011-2593
Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x prior to 9.3-57.5 and 10.0 prior to 10.0-69.4 allows remote malicious users to execute arbitrary code via a crafted Content-Leng...
Citrix Access Gateway Plug-in
Citrix Access Gateway Plug-in 10.0
5.4
CVSSv3
CVE-2022-25630
An authenticated user can embed malicious content with XSS into the admin group policy page.
Symantec Messaging Gateway
5.4
CVSSv3
CVE-2022-25629
An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).
Symantec Messaging Gateway
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »