CVE-2019-18378: XSS
Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-18378.
What is the severity of CVE-2019-18378?
The severity of CVE-2019-18378 is medium.
What is the affected software for CVE-2019-18378?
The affected software for CVE-2019-18378 is Symantec Messaging Gateway prior to version 10.7.3.
What is a cross-site scripting (XSS) vulnerability?
A cross-site scripting (XSS) vulnerability is a type of issue that allows attackers to inject malicious scripts into web pages viewed by other users.
How can an attacker exploit the CVE-2019-18378 vulnerability?
An attacker can exploit the CVE-2019-18378 vulnerability to inject client-side scripts into web pages and potentially perform unauthorized actions on behalf of other users.
How can I fix CVE-2019-18378?
To fix CVE-2019-18378, update Symantec Messaging Gateway to version 10.7.3 or later.