CVE-2012-0303: Symantec Message Filter

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attackers to hijack the authentication of arbitrary users for requests that (1) execute application commands or (2) create admin accounts.

Affected products

• Symantec Message Filter: up to and including 6.3

Published 2012-07-05. Last modified 2026-06-16.