Symantec Corporation Symantec Messaging Gateway vulnerabilities

2 vulnerabilities

Known vulnerabilities in Symantec Corporation Symantec Messaging Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-12243symantec corporationsymantec messaging gateway+1
EPSS score
0.77%
The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue where XML input containing a reference to an external entity is processed by a weakly configured XML parser. The attack uses file URI schemes or relative paths in the system identifier to access files that should not normally be accessible.9.8CVE-2018-12242symantec corporationsymantec messaging gateway+1
EPSS score
2.95%
The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network.