CVE-2016-5312: Symantec Messaging Gateway

Medium severity, CVSS 6.5. EPSS: 54% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.

Affected products

• Symantec Messaging Gateway: up to and including 10.6.1

Published 2017-04-14. Last modified 2026-06-17.