Vulnerability Details CVE-2022-25629
An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.9%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-25629
-
cpe:2.3:a:symantec:messaging_gateway:10.0
-
cpe:2.3:a:symantec:messaging_gateway:10.0.1
-
cpe:2.3:a:symantec:messaging_gateway:10.0.2
-
cpe:2.3:a:symantec:messaging_gateway:10.0.3
-
cpe:2.3:a:symantec:messaging_gateway:10.5.0
-
cpe:2.3:a:symantec:messaging_gateway:10.5.1
-
cpe:2.3:a:symantec:messaging_gateway:10.5.2
-
cpe:2.3:a:symantec:messaging_gateway:10.5.4
-
cpe:2.3:a:symantec:messaging_gateway:10.6.0
-
cpe:2.3:a:symantec:messaging_gateway:10.6.1
-
cpe:2.3:a:symantec:messaging_gateway:10.6.2
-
cpe:2.3:a:symantec:messaging_gateway:10.6.3
-
cpe:2.3:a:symantec:messaging_gateway:10.6.4
-
cpe:2.3:a:symantec:messaging_gateway:10.6.5
-
cpe:2.3:a:symantec:messaging_gateway:10.6.6
-
cpe:2.3:a:symantec:messaging_gateway:10.7.0
-
cpe:2.3:a:symantec:messaging_gateway:10.7.3
-
cpe:2.3:a:symantec:messaging_gateway:9.5
-
cpe:2.3:a:symantec:messaging_gateway:9.5.1
-
cpe:2.3:a:symantec:messaging_gateway:9.5.2
-
cpe:2.3:a:symantec:messaging_gateway:9.5.3
-
cpe:2.3:a:symantec:messaging_gateway:9.5.4