CVE-2012-0307

Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) before 10.0 allow remote attackers to inject arbitrary web script or HTML via (1) web content or (2) e-mail content.

Published: Aug 29, 2012
Updated: Apr 13, 2023
CVE: CVE-2012-0307
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
symantec / messaging_gateway	9.5.2	9.5.2.x
symantec / messaging_gateway	-	9.5.4.x
symantec / messaging_gateway	9.5.1	9.5.1.x
symantec / messaging_gateway	9.5.3	9.5.3.x
symantec / messaging_gateway	9.5	9.5.x

http://www.securityfocus.com/bid/55138
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/78031

Vulnerability Database

289,871

CVE-2012-0307