[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fthTI4_1mjZrTtSA75P4OcgZX4nnXjiq0GeQUBsEyEl4":3,"g5a-ex:symantec\u002Fmessaging_gateway@*":171,"g5a-family:symantec\u002Fmessaging_gateway":173},{"success":4,"data":5},true,{"product":6,"versions":63,"topVulnerabilitiesByEpss":86,"kevVulnerabilities":148,"seoMetadata":149,"meta":168},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":62},"symantec","messaging_gateway",22,25,0,"2022-12-09",[14,18,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,54,56,58,60],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"10.0",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"10.0.1",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"10.0.2",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"10.0.3",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"10.5.0",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"10.5.1",{"version":30,"cve_count":11,"kev_count":11,"has_kev":17},"10.5.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},"10.5.4",{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},"10.6.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"10.6.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"10.6.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"10.6.3",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"10.6.4",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"10.6.5",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"10.6.6",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"10.7.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"10.7.3",{"version":52,"cve_count":53,"kev_count":11,"has_kev":17},"9.5",6,{"version":55,"cve_count":53,"kev_count":11,"has_kev":17},"9.5.1",{"version":57,"cve_count":53,"kev_count":11,"has_kev":17},"9.5.2",{"version":59,"cve_count":53,"kev_count":11,"has_kev":17},"9.5.3",{"version":61,"cve_count":20,"kev_count":11,"has_kev":17},"9.5.4","Messaging Gateway by Symantec is a technology product with 22 tracked versions and 25 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":11,"kev_count":11,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},{"version":52,"cve_count":53,"kev_count":11,"has_kev":17},{"version":55,"cve_count":53,"kev_count":11,"has_kev":17},{"version":57,"cve_count":53,"kev_count":11,"has_kev":17},{"version":59,"cve_count":53,"kev_count":11,"has_kev":17},{"version":61,"cve_count":20,"kev_count":11,"has_kev":17},[87,95,103,109,116,123,128,133,137,143],{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":94},"CVE-2017-6326","The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process.","2017-06-26",10,"v3.0","Critical",0.72759,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":100,"severity":101,"isKev":17,"epssScore":102},"CVE-2012-4347","Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail\u002Fexport or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail\u002Fadmin\u002Frestore\u002Fdownload.do.","2012-12-05",5,"v2","Medium",0.5883,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":92,"severity":101,"isKev":17,"epssScore":108},"CVE-2016-5312","Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail\u002Fservlet\u002Fcom.ve.kavachart.servlet.ChartStream.","2017-04-14",6.5,0.53982,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":100,"severity":114,"isKev":17,"epssScore":115},"CVE-2012-3579","Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.","2012-08-29",7.9,"High",0.40211,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":121,"severity":114,"isKev":17,"epssScore":122},"CVE-2012-6277","Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to \"a number of underlying issues\" in which \"some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code.\"","2020-02-21",7.8,"v3.1",0.08119,{"cveId":124,"description":125,"publishedDate":126,"cvssScore":120,"cvssVersion":92,"severity":114,"isKev":17,"epssScore":127},"CVE-2016-2203","The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.","2016-04-22",0.0706,{"cveId":129,"description":130,"publishedDate":106,"cvssScore":131,"cvssVersion":121,"severity":101,"isKev":17,"epssScore":132},"CVE-2016-5309","The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE\u002FSEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows\u002FMac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.",5.5,0.06877,{"cveId":134,"description":135,"publishedDate":106,"cvssScore":131,"cvssVersion":121,"severity":101,"isKev":17,"epssScore":136},"CVE-2016-5310","The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE\u002FSEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows\u002FMac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (memory corruption) via a crafted RAR file that is mishandled during decompression.",0.05307,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":141,"cvssVersion":92,"severity":93,"isKev":17,"epssScore":142},"CVE-2018-12242","The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network.","2018-09-19",9.8,0.02951,{"cveId":144,"description":145,"publishedDate":90,"cvssScore":146,"cvssVersion":92,"severity":101,"isKev":17,"epssScore":147},"CVE-2017-6325","The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application.",6.6,0.02503,[],{"title":150,"metaDescription":151,"keywords":152,"structuredData":153},"Messaging Gateway by Symantec - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Messaging Gateway by Symantec covering 22 versions with 25 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Messaging Gateway vulnerabilities, Messaging Gateway security, Messaging Gateway CVE, Symantec Messaging Gateway, Messaging Gateway threat intelligence, Symantec security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":154,"@type":155,"name":156,"description":151,"url":157,"manufacturer":158,"applicationCategory":162,"softwareVersion":163,"mainEntity":164},"https:\u002F\u002Fschema.org","SoftwareApplication","Messaging Gateway","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsymantec\u002Fmessaging_gateway",{"@type":159,"name":160,"url":161},"Organization","Symantec","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsymantec","Security Software","22 versions tracked",{"@type":165,"name":166,"description":167,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Messaging Gateway Security Vulnerabilities","Security vulnerabilities affecting Messaging Gateway by Symantec",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":169,"apiVersion":170},"2026-10-17T13:16:15.079Z","3.0",{"rows":172,"total":11,"capped":17,"failed":11},[],[174],{"product":175,"cves":16},"messaging_gateway_for_service_providers"]