symantec messaging gateway

Name: symantec messaging gateway
Brand: symantec

productUS

cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical9high13medium1low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-6326US	critical10.0	72.8% (99th)	Exploit	no fix	2017-06-26	≤ 10.6.3
CVE-2012-4347US	medium5.0	58.8% (99th)	Exploit	no fix	2012-12-05	5 versions
CVE-2016-5312US	medium6.5	54.0% (99th)	Exploit	no fix	2017-04-14	≤ 10.6.1
CVE-2012-3579US	high7.9	40.2% (99th)	Exploit	no fix	2012-08-29	5 versions
CVE-2016-2203US	high7.8	7.06% (94th)	Exploit	no fix	2016-04-22	= 10.6.0
CVE-2016-5309US	medium5.5	6.88% (94th)	Exploit	no fix	2017-04-14	≤ 10.6.1
CVE-2016-5310US	medium5.5	5.31% (93rd)	Exploit	no fix	2017-04-14	≤ 10.6.1
CVE-2012-0308US	medium6.8	1.92% (80th)	Exploit	no fix	2012-08-29	6 versions
CVE-2022-25630US	medium5.4	1.57% (75th)	Exploit	10.8	2022-12-09	< 10.8
CVE-2012-6277US	high7.8	8.12% (95th)	—	10.0.1	2020-02-21	9.5 → 10.0.1
CVE-2018-12242US	critical9.8	2.95% (87th)	—	10.6.6	2018-09-19	< 10.6.6
CVE-2017-6325US	medium6.6	2.50% (85th)	—	no fix	2017-06-26	≤ 10.6.2
CVE-2014-1648US	medium4.3	2.08% (81st)	—	no fix	2014-04-23	6 versions
CVE-2012-0307US	medium4.3	1.97% (80th)	—	no fix	2012-08-29	5 versions
CVE-2019-18377US	high7.2	1.40% (72nd)	—	10.7.3	2019-12-11	< 10.7.3
CVE-2017-15532US	medium5.7	1.37% (72nd)	—	10.6.4	2017-12-20	< 10.6.4
CVE-2017-6324US	high7.3	1.30% (70th)	—	no fix	2017-06-26	≤ 10.6.2
CVE-2012-3580US	high7.7	1.13% (66th)	—	no fix	2012-08-29	5 versions
CVE-2019-18379US	high7.3	1.12% (66th)	—	10.7.3	2019-12-11	< 10.7.3
CVE-2018-12243US	high8.8	0.77% (55th)	—	10.6.6	2018-09-19	< 10.6.6
CVE-2019-18378US	medium4.8	0.73% (54th)	—	10.7.3	2019-12-11	< 10.7.3
CVE-2016-2204US	high8.2	0.67% (52nd)	—	no fix	2016-04-22	2 versions
CVE-2012-3581US	low3.3	0.64% (50th)	—	no fix	2012-08-29	5 versions
CVE-2019-9699US	medium4.5	0.48% (41st)	—	10.7.0	2019-10-24	< 10.7.0
CVE-2022-25629US	medium5.4	0.40% (35th)	—	10.8	2022-12-09	< 10.8

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan