Symantec Brightmail Gateway vulnerabilities

2 CVEs affecting Symantec Brightmail Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1611, published 2013-05-09.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-3032, published 2010-03-05. High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days. Integer overflow in kvolefio.dll 8.5.0.8339 and 10.5.0.0 in the Autonomy KeyView Filter SDK, as used in IBM Lotus Notes 8.5, Symantec Mail Security for Microsoft Exchange 5.0.10 through 5.0.13, and…
• CVE-2013-1611, published 2013-05-09. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gateway 9.5.x allow remote authenticated users to inject…