Lucene search
K

CVE-2022-25630

🗓️ 09 Dec 2022 00:00:00Reported by symantecType 
cve
 cve
🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

An authenticated user can embed malicious content with XSS into the admin group policy page

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting Vulnerability
8 Apr 202300:00
zdt
Circl
CVE-2022-25630
9 Dec 202220:18
circl
CNNVD
Broadcom Symantec Messaging Gateway 跨站脚本漏洞
9 Dec 202200:00
cnnvd
Cvelist
CVE-2022-25630
9 Dec 202200:00
cvelist
Exploit DB
Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS)
8 Apr 202300:00
exploitdb
EUVD
EUVD-2022-30290
3 Oct 202520:07
euvd
NVD
CVE-2022-25630
9 Dec 202218:15
nvd
OSV
CVE-2022-25630
9 Dec 202218:15
osv
Packet Storm
Symantec Messaging Gateway 10.7.4 Cross Site Scripting
10 Apr 202300:00
packetstorm
Prion
Code injection
9 Dec 202218:15
prion
Rows per page
NVD
[
  {
    "vendor": "n/a",
    "product": "Symantec Messaging Gateway",
    "versions": [
      {
        "version": "All releases prior to SMG 10.8",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
adminGroupNamerequest body/brightmail/admin/administration/AdminGroupPolicyFlow$save.floStored XSS via admin group policy save endpoint (payload echoed into page)CWE-79
adminGroupDescriptionrequest body/brightmail/admin/administration/AdminGroupPolicyFlow$save.floStored XSS via admin group policy save endpoint (payload echoed into page)CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:33Current
5.1Medium risk
Vulners AI Score5.1
CVSS 3.15.4
EPSS0.01476
SSVC
65