Search/CVE-2007-0563
● CVE

CVE-2007-0563

VendorsymantecProductweb securityDiscoveredJan 30, 2007UpdatedApr 23, 2026

Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.

CVSS v3.1
—
EPSS
2.13%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 29, 2026
▲ 0.07pp
2.07% → 2.13% over 2 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Jan 30, 2007
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026