Search/CVE-2010-0115
● CVE

CVE-2010-0115

VendorsymantecProductweb gatewayDiscoveredJan 14, 2011UpdatedApr 29, 2026

SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter.

CVSS v3.1
—
EPSS
2.36%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
Jan 14, 2011
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026