CVE-2022-25629

2022-12-0900:00:00

symantec

www.cve.org

authenticated user

malicious annotation

content tab

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Symantec Messaging Gateway",
    "versions": [
      {
        "version": "All releases prior to SMG 10.8",
        "status": "affected"
      }
    ]
  }
]