CVE-2010-0115: Symantec Web Gateway

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.

Affected products

• Symantec Web Gateway: version 4.5 only; version 4.5.0.325 only; version 4.5.0.326 only; version 4.5.0.327 only

Published 2011-01-14. Last modified 2026-06-16.