MG
Product
Messaging Gateway
25
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 9Low 0
Watch
Add Messaging Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6326 | 10.0 | Jun 26 | The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands… Affected: through 10.6.3 |
| CVE-2018-12242 | 9.8 | Sep 19 | The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially… Affected: before 10.6.6 |
| CVE-2018-12243 | 8.8 | Sep 19 | The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue where XML input containing a reference… Affected: before 10.6.6 |
| CVE-2016-2204 | 8.2 | Apr 22 | The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input Affected: through 10.6.0; 10.6.0; 10.6.0; 10.6.0; 10.6.0; 10.6.0; +1 more |
| CVE-2012-6277 | 7.8 | Feb 21 | Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for… Affected: 9.5 before 10.0.1 |
| CVE-2016-2203 | 7.8 | Apr 22 | The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read… Affected: 10.6.0; 10.6.0; 10.6.0 |
| CVE-2019-18379 | 7.3 | Dec 11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attacker send crafted… Affected: before 10.7.3 |
| CVE-2017-6324 | 7.3 | Jun 26 | The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the… Affected: through 10.6.2 |
| CVE-2019-18377 | 7.2 | Dec 11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the… Affected: before 10.7.3 |
| CVE-2017-6325 | 6.6 | Jun 26 | The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a… Affected: through 10.6.2 |
| CVE-2016-5312 | 6.5 | Apr 14 | Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a Affected: through 10.6.1 |
| CVE-2017-15532 | 5.7 | Dec 20 | Prior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also known as directory traversal) Affected: before 10.6.4 |
| CVE-2016-5310 | 5.5 | Apr 14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center… Affected: through 10.6.1 |
| CVE-2016-5309 | 5.5 | Apr 14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center… Affected: through 10.6.1 |
| CVE-2022-25630 | 5.4 | Dec 9 | An authenticated user can embed malicious content with XSS into the admin group policy page Affected: before 10.8 |
| CVE-2022-25629 | 5.4 | Dec 9 | An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation… Affected: before 10.8 |
| CVE-2019-18378 | 4.8 | Dec 11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side… Affected: before 10.7.3 |
| CVE-2019-9699 | 4.5 | Oct 24 | Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized… Affected: before 10.7.0 |
| CVE-2014-1648 | – | Apr 23 | Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management console in Symantec Messaging Gateway 10.x before 10.5.2 allows… Affected: 10.0; 10.0.1; 10.0.2; 10.0.3; 10.5.0; 10.5.1 |
| CVE-2012-4347 | – | Dec 5 | Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a Affected: 9.5; 9.5.1; 9.5.2; 9.5.3; 9.5.4 |
| CVE-2012-3581 | – | Aug 29 | Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to obtain potentially sensitive information about component versions via unspecified vectors Affected: through 9.5.4; 9.5; 9.5.1; 9.5.2; 9.5.3 |
| CVE-2012-3580 | – | Aug 29 | Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface Affected: through 9.5.4; 9.5; 9.5.1; 9.5.2; 9.5.3 |
| CVE-2012-3579 | – | Aug 29 | Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH… Affected: through 9.5.4; 9.5; 9.5.1; 9.5.2; 9.5.3 |
| CVE-2012-0308 | – | Aug 29 | Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication of administrators Affected: through 9.5.4; 9.5; 9.5.1; 9.5.2; 9.5.3; 10.0 |
| CVE-2012-0307 | – | Aug 29 | Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) before 10.0 allow remote attackers to inject arbitrary web script or HTML via (1) web… Affected: through 9.5.4; 9.5; 9.5.1; 9.5.2; 9.5.3 |
Showing 25