CVE-2004-0192: Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows...

Security readout for executives and security teams

CVE-2004-0192 is a cross-site scripting flaw in the Management Service for Symantec Gateway Security 2.0. A crafted /sgmi URL could cause script to appear in an error page, enabling cookie theft or management session hijacking if an administrator interacts with it. Exposure is most likely limited to legacy environments still running Symantec Gateway Security 2.0 Management Service. Risk increases if the management interface is reachable from untrusted networks or administrators use active sessions while browsing attacker-controlled links. Treat this as a legacy management-plane risk. It is not supported by evidence of current mass exploitation, but exposed or unsupported management services can create outsized business impact because successful abuse may hijack administrative access. Mitigation focus: Identify any Symantec Gateway Security 2.0 Management Service deployments.; Restrict management access to trusted admin networks or VPN paths.; Check Symantec or Broadcom guidance for historical fixes or retirement guidance..

Prepared

Jun 30, 2026, 07:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.