CVE-2022-25629

5.4MEDIUM

Key Information

Vendor
Symantec
Status
Symantec Messaging Gateway
Vendor
CVE Published:
9 December 2022

Summary

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).

Affected Version(s)

Symantec Messaging Gateway = All releases prior to SMG 10.8

Refferences

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.