CVE-2017-13678: Broadcom Advanced Secure Gateway

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application.

Affected products

• Broadcom Advanced Secure Gateway: from 6.6, before 6.6.5.14 (fixed in 6.6.5.14); from 6.7.3, before 6.7.3.7 (fixed in 6.7.3.7); from 6.7.4, before 6.7.4.107 (fixed in 6.7.4.107)
• Broadcom Symantec Proxysg: from 6.5, before 6.5.10.8 (fixed in 6.5.10.8); from 6.6, before 6.6.5.14 (fixed in 6.6.5.14); from 6.7.3, before 6.7.3.7 (fixed in 6.7.3.7); from 6.7.4, before 6.7.4.107 (fixed in 6.7.4.107)

Published 2018-04-11. Last modified 2026-06-17.