The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote…

1. 2012-05-17 First public exploit (Metasploit exploit/linux/http/symantec_web_gateway_exec)
2. 2012-05-21 Published

72.95% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/linux/http/symantec_web_gateway_exec Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection metasploit exploit, excellent rank, 2012-05-17
• Metasploit exploit/linux/http/symantec_web_gateway_lfi Symantec Web Gateway 5.0.2.8 relfile File Inclusion Vulnerability metasploit exploit, excellent rank, 2012-05-17
• EDB-19406 symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities webapps, 2012-06-27
• EDB-19065 Symantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit) webapps, 2012-06-12
• EDB-18942 Symantec Web Gateway 5.0.2.8 - Command Execution (Metasploit) remote, 2012-05-28
• EDB-18932 Symantec Web Gateway 5.0.2 - Local/Remote File Inclusion / Remote Code Execution webapps, 2012-05-26

Weakness

• CWE-264 Permissions, Privileges, and Access Controls

• symantec.com /security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=2012

  vendor-advisory

• securityfocus.com /bid/53444

  vdb-entry

• exchange.xforce.ibmcloud.com /vulnerabilities/75731

  vdb-entry

• CVE List CVE-2012-0297
• NVD CVE-2012-0297

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.