CVE Feed

    Dashboard / CVE / CVE-2019-12751

    CVE-2019-12751

    Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

    Published:Jul 11, 2019
    Last Modified:Nov 21, 2024
    EPS:Jul 11, 2019
    EPSS Score:0.00757
    CVSS Score:9.8

    Affected Products

    Vendor
    Symantec
    Product
    Message Gateway

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-6327 (CVSS 8.8) — The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which descri…
    CVE-2017-6328 (CVSS 8.8) — The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also kn…
    CVE-2016-2209 (CVSS 7.3) — Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP);…
    CVE-2016-2210 (CVSS 7.3) — Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP)…
    CVE-2016-2211 (CVSS 7.8) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-3644 (CVSS 8.4) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-3645 (CVSS 9.8) — Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protectio…
    CVE-2016-3646 (CVSS 8.4) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-2207 (CVSS 8.4) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High