| Package | Affected versions | Patched versions |
|---|---|---|
| skyhigh secure web gateway | = 12.0.0≥ 10.0.0, < 10.2.17≥ 11.0.0, < 11.2.6 | 10.2.1711.2.6 |
A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free