CVE Feed

    Dashboard / CVE / CVE-2004-2755

    CVE-2004-2755

    Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.

    Published:Dec 31, 2004
    Last Modified:Apr 16, 2026
    EPS:Nov 15, 2007
    EPSS Score:0.01163
    CVSS Score:4.3

    Affected Products

    Vendor
    Symantec
    Product
    Web Security

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-13917 (CVSS 7) — WSS Agent, prior to 9.8.5, may be susceptible to a Elevation of Privilege vulnerability, which is a type of is…
    CVE-2007-0447 (CVSS 9.3) — Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers t…
    CVE-2007-3699 (CVSS 9.3) — The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (i…
    CVE-2007-0564 (CVSS 4) — The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a d…
    CVE-2007-0563 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remot…
    CVE-2005-1346 (CVSS 2.6) — Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.…
    CVE-2005-0249 (CVSS 7.5) — Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to exe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High