VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Dec 11, 2019· Updated Jun 17, 2026

CVE-2019-18378

CVE-2019-18378

Description

Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.

Affected products

3
  • Symantec/Messaging Gateway2 versions
    cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*range: <10.7.3
    • (no CPE)range: <10.7.3
  • Symantec/Messaging Gatewaydescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.