Message Gateway vulnerabilities | LiveThreat CVE Feed

Product

Message Gateway

by Symantec · last CVE Jul 11, 2019

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 2High 8Medium 0Low 0

Severity

All severities10 Critical2 High8 Medium0 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Message Gateway to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-6327 In wildKEV	8.8	36%	Aug 11	Symantec Messaging Gateway Remote Code Execution Vulnerability Affected: before 10.6.3-267
CVE-2019-12751	9.8	2%	Jul 11	Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the… Affected: before 10.7.1
CVE-2016-3645	9.8	25%	Jun 30	Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through… Affected: through 10.6.1-3
CVE-2017-6328	8.8	2%	Aug 11	The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is… Affected: through 10.6.3-2
CVE-2016-3646	8.4	18%	Jun 30	The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: through 10.6.1-3
CVE-2016-3644	8.4	18%	Jun 30	The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: through 10.6.1-3
CVE-2016-2207	8.4	18%	Jun 30	The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: through 10.6.1-3
CVE-2016-2211	7.8	53%	Jun 30	The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: through 10.6.1-3
CVE-2016-2210	7.3	11%	Jun 30	Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: through 10.6.1-3
CVE-2016-2209	7.3	21%	Jun 30	Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: through 10.6.1-3