CVE-2021-30651: Broadcom Symantec Messaging Gateway

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access.

Affected products

• Broadcom Symantec Messaging Gateway: from 10.7, before 10.7.5 (fixed in 10.7.5)

Published 2022-06-24. Last modified 2026-06-17.