Checking Symantec Network Security product for CVE/Vulnerability

Products

• ProxySG Software - SGOS

Issue/Introduction

You want to check Symantec Network Security products Security Advisory for CVE/Vulnerabilities. This includes Edge SWG(ProxySG), Cloud SWG, SSLV, CAS, Management Center, etc.

• Security Advisory: You to know if a Symantec Network Security product is impacted by one or more vulnerabilities documented in a security advisory. 
• CVE Assessment: You want more detail about a CVE in the context of a specific Symantec Network Security product. 
• Vulnerability Scan Result: A vulnerability scanner indicates Symantec Network Security product is impacted by a particular vulnerability. 
• Customer Reported Vulnerability: You are reporting a new vulnerability.

Resolution

You can search the Security Advisories for CVE's and Vulnerabilities using this link.

• https://support.broadcom.com/group/ecx/security-advisory

 

Security Advisory: (You want to know if a Symantec Network Security product is impacted by one or more vulnerabilities documented in a security advisory.)

• If specific product is not found in security advisory you can open a case via Broadcom support portal for investigation.

 

CVE Assessment: (You want more detail about a CVE in the context of a specific Symantec Network Security product.) 

• If you are unable to find in security advisory search or additional details/context is needed you can open case via support portal with CVE and additional details/context needed.

 

Vulnerability Scan Result: (A vulnerability scanner indicates Symantec Network Security product is impacted by a particular vulnerability.) 

• If you are unable to find in security advisory search you can open case via support portal with CVE/vulnerability in question.

 

Customer Reported Vulnerability: (You are reporting a new vulnerability.)

PSIRT maintains the following public facing page with instructions for an external researcher to submit suspected product security issues to Symantec.

• https://www.broadcom.com/support/security-center/vulnerability-management

 

If you believe you have found a vulnerability in a Symantec product, cloud service, or IT infrastructure that has not been resolved, please contact Symantec via the email addresses provided below:

• Vulnerability reports for Symantec products should be sent to the Symantec Product Security Incident Response Team (PSIRT) at [email protected].