Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | Symantec Messaging Gateway 10.6.3-2 - Unauthenticated root Remote Command Execution | 19 Aug 201700:00 | – | zdt |
 | Potential for China Cyber Response to Heightened U.S.–China Tensions | 20 Oct 202012:00 | – | ics |
 | CVE-2017-6327 | 11 Aug 201700:00 | – | attackerkb |
 | Immunity Canvas: BRIGHTMAIL_RESTORE | 11 Aug 201720:29 | – | canvas |
 | CVE-2017-6327 | 11 Aug 201717:17 | – | circl |
 | Symantec Messaging Gateway Remote Code Execution Vulnerability | 3 Nov 202100:00 | – | cisa_kev |
 | Symantec Messaging Gateway Remote Code Execution Vulnerability (CNVD-2017-28446) | 14 Aug 201700:00 | – | cnvd |
 | Symantec Messaging Gateway performRestore Command Injection (CVE-2017-6327) | 3 Sep 201700:00 | – | checkpoint_advisories |
 | CVE-2017-6327 | 11 Aug 201720:00 | – | cvelist |
 | Symantec Messaging Gateway RestoreAction.performRestore() RCE | 1 Sep 201700:00 | – | dsquare |
10
Node
[
{
"product": "Messaging Gateway",
"vendor": "Symantec Corporation",
"versions": [
{
"status": "affected",
"version": "All versions prior to version 10.6.3-267"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| method | query param | brightmail/action1.do | Unauthenticated GET allows invoking public methods via reflection-like behavior and logging in as a user by supplying decrypted notify payload. | CWE-77 |
| notify | query param | brightmail/action1.do | Unauthenticated GET allows invoking public methods via reflection-like behavior and logging in as a user by supplying decrypted notify payload. | CWE-77 |
| id | query param | brightmail/action1.do | Unauthenticated GET allows invoking public methods via reflection-like behavior and logging in as a user by supplying decrypted notify payload. | CWE-77 |
| method | query param | brightmail/admin/restore/action5.do | Authenticated users can trigger a restore that passes data to a local daemon, potentially enabling command injection via crafted localBackupFileSelection. | CWE-77 |
| restoreSource | query param | brightmail/admin/restore/action5.do | Authenticated users can trigger a restore that passes data to a local daemon, potentially enabling command injection via crafted localBackupFileSelection. | CWE-77 |
| localBackupFileSelection | query param | brightmail/admin/restore/action5.do | Authenticated users can trigger a restore that passes data to a local daemon, potentially enabling command injection via crafted localBackupFileSelection. | CWE-77 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Apr 2026 19:14Current
8.8High risk
Vulners AI Score8.8
CVSS 26.5
CVSS 3.18.8
EPSS0.76788
SSVC