CVE-2006-0522: Symantec Sygate Management Server

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

Affected products

• Symantec Sygate Management Server: up to and including 4.1_mr_2_build_1417_english; version 3.5_mr_3_build_894_english only; version 4.0_mr_1_build_1104_english only; version 4.1_ga_build_1258_japanese only; version 4.1_mr1_build_1351_chinese only

Published 2006-02-02. Last modified 2026-06-16.