Secure web gateway

This hub aggregates every CVE we track for Secure web gateway, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Secure web gateway.

• CVE-2024-6398An information disclosure vulnerability in SWG in versions 12.x prior to 12.2.10 and 11.x prior to 11.2.24 allows information stored in a customizable block page to be disclosed to third-party webs...4.3Jul 15, 2024
• CVE-2024-3378iboss Secure Web Gateway Login Portal login cross site scripting4.3Apr 6, 2024
• CVE-2023-4400 A password management vulnerability in Skyhigh Secure Web Gateway (SWG) in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authe...6.2Sep 13, 2023
• CVE-2022-2310Skyhigh SWG Authentication bypass vulnerability10.0Jul 27, 2022
• CVE-2022-1254SWG URL redirection vulnerability6.1Apr 20, 2022
• CVE-2020-9363The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for ...7.8Feb 24, 2020
• CVE-2017-18001Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, ...9.8Dec 31, 2017
• CVE-2008-5540Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "...9.3Dec 12, 2008