{"api_version":"1","generated_at":"2026-07-23T08:02:08+00:00","cve":"CVE-2007-0563","urls":{"html":"https://cve.report/CVE-2007-0563","api":"https://cve.report/api/cve/CVE-2007-0563.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-0563","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-0563"},"summary":{"title":"CVE-2007-0563","description":"Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-01-30 16:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31750","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31750","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html","name":"http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Symantec Web Security Multiple Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0330","name":"http://www.vupen.com/english/advisories/2007/0330","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/23896","name":"http://secunia.com/advisories/23896","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Symantec Web Security Two Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/22184","name":"http://www.securityfocus.com/bid/22184","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Symantec Web Security Multiple Denial of Service And Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/32960","name":"http://osvdb.org/32960","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://osvdb.org/32961","name":"http://osvdb.org/32961","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1017558","name":"http://securitytracker.com/id?1017558","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Symantec Web Security Input Validation Hole Permits Cross-Site Scripting and Denial of Service Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0563","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0563","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.0.1.72","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.59","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.60","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.63","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.67","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"web_security","cpe6":"3.01.68","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:26:53.243Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html"},{"name":"ADV-2007-0330","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0330"},{"name":"23896","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/23896"},{"name":"32960","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/32960"},{"name":"1017558","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1017558"},{"name":"symantec-html-xss(31750)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31750"},{"name":"32961","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/32961"},{"name":"22184","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/22184"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-01-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html"},{"name":"ADV-2007-0330","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0330"},{"name":"23896","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/23896"},{"name":"32960","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/32960"},{"name":"1017558","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1017558"},{"name":"symantec-html-xss(31750)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31750"},{"name":"32961","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/32961"},{"name":"22184","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/22184"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-0563","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html","refsource":"CONFIRM","url":"http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html"},{"name":"ADV-2007-0330","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0330"},{"name":"23896","refsource":"SECUNIA","url":"http://secunia.com/advisories/23896"},{"name":"32960","refsource":"OSVDB","url":"http://osvdb.org/32960"},{"name":"1017558","refsource":"SECTRACK","url":"http://securitytracker.com/id?1017558"},{"name":"symantec-html-xss(31750)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31750"},{"name":"32961","refsource":"OSVDB","url":"http://osvdb.org/32961"},{"name":"22184","refsource":"BID","url":"http://www.securityfocus.com/bid/22184"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-0563","datePublished":"2007-01-30T16:00:00.000Z","dateReserved":"2007-01-30T00:00:00.000Z","dateUpdated":"2024-08-07T12:26:53.243Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-01-30 16:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.0.1.72:*:*:*:*:*:*:*","matchCriteriaId":"47BC2FF9-A77F-46B8-A714-BBA08A81E5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*","matchCriteriaId":"B05B8522-E203-49A0-8C5B-3DA7B06AF5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*","matchCriteriaId":"9FD064CE-3C39-4243-B59E-CC8E48ED50DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*","matchCriteriaId":"9886B467-793C-4D07-9B1B-B80FA5266D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*","matchCriteriaId":"676F5A96-B21B-49FF-86EA-F18F9C3931C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*","matchCriteriaId":"18991132-C5B6-43AB-BDCB-196BB2957F27"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*","matchCriteriaId":"42CE2596-83A9-4A80-A8C6-825EDEAAB8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*","matchCriteriaId":"CBA16BAF-6263-44EA-B3EB-187264913D8D"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"563","Ordinal":"1","Title":"CVE-2007-0563","CVE":"CVE-2007-0563","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"563","Ordinal":"1","NoteData":"Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS.","Type":"Description","Title":"CVE-2007-0563"},{"CveYear":"2007","CveId":"563","Ordinal":"2","NoteData":"2007-01-30","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"563","Ordinal":"3","NoteData":"2017-07-28","Type":"Other","Title":"Modified"}]}}}