TI-2019-09540 Aliases CVE-2019-12751 GHSA-x3hv-22gr-7q5j

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation…

MEDIUM 46Published 2019-07-11 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Why it matters now

EPSS 0.02282 83rd percentileScored 2026-11-07

Fix Fixed Symantec Messaging Gateway: 10.7.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Symantec Messaging Gateway	before 10.7.1	10.7.1	Patch available	CNA

Symantec Messaging Gateway Vendor— Affected before 10.7.1 Fixed in 10.7.1 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:symantec:message_gateway::::::::	before 10.7.1	Vulnerable	Symantec

cpe:2.3:a:symantec:message_gateway:*:*:*:*:*:*:*:* Versions before 10.7.1 Vulnerable ·Symantec

Remediation

Fix · CNA Symantec Messaging Gateway Fixed in 10.7.1

Timeline

2026-10-02 Threatist record created from CVE-2019-12751
2026-10-03 Alias added: GHSA-x3hv-22gr-7q5j

References

Advisory 1

https://support.symantec.com/us/en/article.SYMSA1486.html

TI-2017-04157 Command injection in Symantec Messaging Gateway KEVCVSS 3.1HIGH 8.8
TI-2016-02020 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 7.8
TI-2016-03091 Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec… CVSS 3.0CRITICAL 9.8
TI-2016-03092 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 8.4
TI-2016-03090 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 8.4
TI-2016-02016 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 8.4

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences