Symantec Messaging Gateway 漏洞

时间轴

版本

10.0	8
10.1	8
10.2	8
10.3	8
10.4	8

修正

Official Fix	22
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	2

易受攻击性

High	10
Functional	0
Proof-of-Concept	4
Unproven	0
Not Defined	10

访问向量

Not Defined	0
Physical	0
Local	4
Adjacent	8
Network	12

身份验证

Not Defined	0
High	8
Low	10
None	6

用户交互

Not Defined	0
Required	4
None	20

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	2
≤6	4
≤7	2
≤8	4
≤9	6
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	2
≤6	4
≤7	0
≤8	8
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	4
≤4	2
≤5	0
≤6	4
≤7	2
≤8	6
≤9	4
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	2
≤7	2
≤8	2
≤9	4
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	0
≤8	2
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	0
<2k	0
<5k	6
<10k	4
<25k	14
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	20
<2k	0
<5k	2
<10k	0
<25k	2
<50k	0
<100k	0
≥100k	0

攻击市场容量

🔴 CTI 活动

Affected Versions (20): 9.5, 9.5.1, 9.5.3-3, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.5.1, 10.6, 10.6.1, 10.6.2, 10.6.3, 10.6.4, 10.6.5, 10.7, 10.7.1, 10.7.2, 10.7.3

Link to Product Website: https://www.symantec.com/

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2020-12-10	4.3	4.1	Symantec Messaging Gateway Web UI 信息公开	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2020-12595
2020-12-10	8.8	8.4	Symantec Messaging Gateway CLI 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2020-12594
2019-12-11	7.3	7.3	Symantec Messaging Gateway 权限升级	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.01	CVE-2019-18379
2019-12-11	3.6	3.4	Symantec Messaging Gateway 跨网站脚本	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2019-18378
2019-12-11	5.9	5.7	Symantec Messaging Gateway 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2019-18377
2019-07-11	6.7	6.4	Symantec Messaging Gateway 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2019-12751
2019-05-09	4.2	4.0	Symantec Messaging Gateway 信息公开	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-9699
2018-09-19	7.5	7.2	Symantec Messaging Gateway XML Parser XML External Entity	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2018-12243
2018-09-19	8.5	8.2	Symantec Messaging Gateway 弱身份验证	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2018-12242
2017-12-20	5.7	5.5	Symantec Messaging Gateway 目录遍历	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	CVE-2017-15532

14 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

更多条目由 Symantec

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!