Lucene search
HistoryDec 09, 2022 - 6:15 p.m.
CVE-2022-25630
cve-2022-25630
authenticated user
malicious content
xss
admin group policy page
nvd
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
21.8%
An authenticated user can embed malicious content with XSS into the admin group policy page.
Affected configurations
Node
symantecmessaging_gatewayRange<10.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| symantec:messaging_gateway | symantec messaging gateway | lt | 10.8 |
CNA Affected
[
{
"vendor": "n/a",
"product": "Symantec Messaging Gateway",
"versions": [
{
"version": "All releases prior to SMG 10.8",
"status": "affected"
}
]
}
]Related
cvelist
cvelist
CVE-2022-25630
2022-12-09 00:00:00
packetstorm
packetstorm
Symantec Messaging Gateway 10.7.4 Cross Site Scripting
2023-04-10 00:00:00
zdt
zdt
prion
prion
Code injection
2022-12-09 18:15:00
nvd
nvd
CVE-2022-25630
2022-12-09 18:15:18
exploitdb
exploitdb
Symantec Messaging Gateway 10.7.4 - Stored Cross-Site Scripting (XSS)
2023-04-08 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
21.8%
Related for CVE-2022-25630