Broadcom Symantec Messaging Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Broadcom Symantec Messaging Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-23614 — CVSS 10.0 (critical): A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this…
• CVE-2024-23615 — CVSS 10.0 (critical): A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit…
• CVE-2014-0160 — CVSS 7.5 (high) — actively exploited: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows…
• CVE-2020-12594 — CVSS 7.2 (high): A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full…
• CVE-2020-12595 — CVSS 4.9 (medium): An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup…
• CVE-2021-30651 — CVSS 4.9 (medium): A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not…