CVE-2016-9099 in Symantec and Broadcom Products
Published on May 11, 2017
Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
Products Associated with CVE-2016-9099
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-9099 are published in these products:
Affected Versions
Symantec Corporation ASG:- Version 6.6 is affected.
- Version 6.7 prior to 6.7.2.1 is affected.
- Version 6.5 prior to 6.5.10.6 is affected.
- Version 6.6 is affected.
- Version 6.7 prior to 6.7.2.1 is affected.
Exploit Probability
EPSS
0.31%
Percentile
53.99%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.