CVE-2022-25630 An authenticated user can embed malicious content with XSS into the admin group policy page

Description

An authenticated user can embed malicious content with XSS into the admin group policy page.

Affected products and versions

Product	Affected versions	Fixed in
Symantec Messaging Gateway	Versions not published

Other CVEs of Symantec Messaging Gateway

The 6 CVEs of Symantec Messaging Gateway →

CVE-2022-25629 An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation… 5.4 Medium CVE-2019-18379 Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which… Not rated CVE-2019-18378 Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type… Not rated CVE-2019-18377 Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type… Not rated