Read the docs

Symantec

Records598All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical93CVSS 9.0–10.0
CVSS high193CVSS 7.0–8.9

Exploited now

Symantec records in CISA KEV
TI-2017-04157 Symantec Messaging Gateway Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Endpoint Protection 71 records CRITICAL Norton Antivirus 67 records HIGH Endpoint Protection Manager 41 records HIGH Norton Internet Security 40 records HIGH Web Gateway 35 records HIGH Client Security 27 records CRITICAL Messaging Gateway 25 records HIGH Altiris Deployment Solution 24 records HIGH

Records

10 records in Message Gateway · all components

TI-2017-04157 CVE-2017-6327 · GHSA-x45p-q5pf-h9jx

Command injection in Symantec Messaging Gateway

Priority CRITICAL 97KEV

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.35911 Published 2017-08-11 No fix listed CWE-77
TI-2016-03091 CVE-2016-3645 · GHSA-f66w-g7r8-43h9

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec…

Priority MEDIUM 63

Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec End…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.24614 Published 2016-06-30 No fix listed CWE-189
TI-2019-09540 CVE-2019-12751 · GHSA-x3hv-22gr-7q5j

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation…

Priority MEDIUM 46

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated ac…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02282 Published 2019-07-11 Fixed in 10.7.1
TI-2017-04158 CVE-2017-6328 · GHSA-v26p-6c8q-68r2

Cross-site request forgery in Symantec Messaging Gateway

Priority MEDIUM 42

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a website…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02139 Published 2017-08-11 No fix listed CWE-352
Open these records in search →