CVE-2018-12243

Symantec Messaging Gateway (SMG) versions prior to 10.6.6 are vulnerable to an XML external entity (XXE) flaw (CVE-2018-12243). The issue arises from a weakly configured XML parser that can process XML input containing external entity references, enabling access to files via file:// URIs or relat...

Symantec Messaging Gateway Multiple Issues

SUMMARY Symantec has released an update to address issues that were discovered in the Symantec Messaging Gateway product. AFFECTED PRODUCTS Symantec Messaging Gateway --- CVE | Affected Versions | Remediation CVE-2018-12242 CVE-2018-12243 | Prior to 10.6.6 | Upgrade to 10.6.6 ISSUES CVE-2018-1224...