CVE-2019-18379: Symantec Messaging Gateway

High severity, CVSS 7.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attacker send crafted requests from the backend server of a vulnerable web application or access services available through the loopback interface.

Affected products

• Symantec Messaging Gateway: before 10.7.3 (fixed in 10.7.3)

Published 2019-12-11. Last modified 2026-06-17.