SM
Product
Symantec Messaging Gateway
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch
Add Symantec Messaging Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 10.6.0; 10.6.1 |
| CVE-2024-23615 | 9.8 | Jan 26 | A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before Affected: through 10.5 |
| CVE-2024-23614 | 9.8 | Jan 26 | A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before Affected: through 9.5 |
| CVE-2020-12594 | 7.2 | Dec 10 | A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance Affected: before 10.7.4 |
| CVE-2021-30651 | 4.9 | Jun 24 | A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access Affected: 10.7 before 10.7.5 |
| CVE-2020-12595 | 4.9 | Dec 10 | An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be… Affected: before 10.7.4 |
Showing 6