Message Gateway vulnerabilitiesAnd the versions its exploited flaws hit.
Message Gateway is made by Symantec. We track 10 published vulnerabilities listed under that exact name, across 30 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 3 November 2021. Symantec lists newer releases under their own names, such as Message Gateway for Service Providers, so check those pages too.
The most recent Message Gateway flaw added to the known-exploited list is CVE-2017-6327, on 3 November 2021. We keep watching the known-exploited list.
Is Message Gateway listed under other names? Yes.
Symantec also lists Message Gateway under more specific names, such as Message Gateway for Service Providers. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which versions of Message Gateway do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "before 10.6.3-267" means every version up to, but not including, 10.6.3-267. Find your version, then patch.
- CVE-2017-6327Exploited list, 3 Nov 2021
Symantec Messaging Gateway Remote Code Execution Vulnerability
before 10.6.3-267
Which Message Gateway vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Symantec Messaging Gateway Remote Code Execution Vulnerability
Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution.
Which Message Gateway flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 36%
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target...
- 2.3%CVE-2019-12751Critical
Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...
- 2.1%CVE-2017-6328High
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a...
Running Message Gateway? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.
- Matched to
- Message Gateway on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 10 published vulnerabilities listed under the name Message Gateway, across 30 versions. The most recent Message Gateway flaw added to the known-exploited list is CVE-2017-6327, on 3 November 2021.
1 is on the list of flaws known to be exploited. The most recently added is CVE-2017-6327.
Symantec also lists Message Gateway under more specific names, such as Message Gateway for Service Providers. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Each flaw names its own versions, usually as ranges. The newest, CVE-2017-6327, affects before 10.6.3-267. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Message Gateway. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.