What is the CVSS score of CVE-2012-3580?

CVE-2012-3580 has a CVSS 2.0 base score of 7.7 (High). CVSS vector: AV:A/AC:L/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.9%.

Messaging Gateway CVE-2012-3580

HIGH

2012-08-29 cve@mitre.org

Information Disclosure Messaging Gateway

7.7

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

AV:A/AC:L/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:L/Au:S/C:C/I:C/A:C

Attack Vector

Adjacent

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 29, 2012 - 10:56 cve.org

HIGH 7.7

DescriptionCVE.org

Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface.

AnalysisAI

Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface. Rated high severity (CVSS 7.7), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the management interface. Affected products include: Symantec Messaging Gateway. Version information: before 10.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Messaging Gateway

View all

CVE-2017-6326 CRITICAL Emergency POC

10.0 Jun 26

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i

CVE-2012-4347 MEDIUM This Month POC

5.0 Dec 05

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow r

CVE-2012-3579 HIGH Act Now POC

7.9 Aug 29

Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier fo

CVE-2016-5312 MEDIUM This Month POC

6.5 Apr 14

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au

CVE-2016-2203 HIGH Act Now POC

7.8 Apr 22

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discove

CVE-2016-5309 MEDIUM This Month POC

5.5 Apr 14

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

CVE-2016-5310 MEDIUM This Month POC

5.5 Apr 14

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

CVE-2012-0308 MEDIUM This Month POC

6.8 Aug 29

Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers

CVE-2018-12242 CRITICAL Act Now

9.8 Sep 19

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is

CVE-2018-12243 HIGH This Week

8.8 Sep 19

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which

CVE-2014-1648 MEDIUM This Month POC

4.3 Apr 23

Cross-site scripting (XSS) vulnerability in brightmail/setting/compliance/DlpConnectFlow$view.flo in the management cons

CVE-2016-2204 HIGH This Week

8.2 Apr 22

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2012-3580 vulnerability details – vuln.today

Back