CVE-2013-1617

HighCVSS 7.4/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.

Metrics

CVSS 2.0 7.4/10AV:A/AC:M/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 1, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-16184.0The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the procCVE-2013-16194.0The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel CVE-2013-16204.3The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MCVE-2013-16214.3Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involvingCVE-2013-16234.3The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC cCVE-2013-16244.0The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channeCVE-2013-16277.8Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remoCVE-2013-16296.8pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allCVE-2013-16306.8pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, whicCVE-2013-16315.3Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table actionCVE-2013-16336.8easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on packCVE-2013-16347.5A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-
CVE-2013-1617: High severity, CVSS 7.4 | Vulnix