Symantec Messaging Gateway vulnerabilities, page 2
27 vulnerabilities
Known vulnerabilities in Symantec Messaging Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-6325symantec corporationmessaging gateway+1
EPSS score2.50%
The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application.CVE-2024-23615broadcomsymantec_messaging_gateway+1EPSS score1.88%
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.CVE-2024-23614broadcomsymantec_messaging_gateway+1EPSS score1.61%
A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.CVE-2019-9699symantecmessaging_gateway+1EPSS score0.48%
Symantec Messaging Gateway (prior to 10.7.0), may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.CVE-2019-18377symantecmessaging_gatewayEPSS score1.40%
Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.CVE-2019-18378symantecmessaging_gatewayEPSS score0.73%
Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.CVE-2019-18379symantecmessaging_gatewayEPSS score1.12%
Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attacker send crafted requests from the backend server of a vulnerable web application or access services available through the loopback interface.