CVE-2018-12243

2018-09-1200:00:00

symantec

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue where XML input containing a reference to an external entity is processed by a weakly configured XML parser. The attack uses file URI schemes or relative paths in the system identifier to access files that should not normally be accessible.

CNA Affected

[
  {
    "product": "Symantec Messaging Gateway",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 10.6.6"
      }
    ]
  }
]