Symantec Gateway Security 5400 vulnerabilities

7 CVEs affecting Symantec Gateway Security 5400, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3699, published 2007-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1029, published 2005-03-01. High severity, CVSS 9.3. EPSS: 17% chance of exploitation in the next 30 days. The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data…
CVE-2007-0447, published 2007-10-05. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
CVE-2004-0192, published 2004-03-15. Medium severity, CVSS 6.8. EPSS: 4.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that…
CVE-2004-0369, published 2004-12-31. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote…
CVE-2007-3699, published 2007-10-05. High severity, CVSS 9.3. EPSS: 3.9% chance of exploitation in the next 30 days. The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
CVE-2005-3768, published 2005-11-23. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products,…
CVE-2005-0817, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to…