Symantec Message Gateway For Service Providers vulnerabilities

7 CVEs affecting Symantec Message Gateway For Service Providers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3646, published 2016-06-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2211, published 2016-06-30. High severity, CVSS 7.8. EPSS: 53.4% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3645, published 2016-06-30. Critical severity, CVSS 9.8. EPSS: 24.6% chance of exploitation in the next 30 days. Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2209, published 2016-06-30. High severity, CVSS 7.3. EPSS: 20.9% chance of exploitation in the next 30 days. Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;…
CVE-2016-2207, published 2016-06-30. High severity, CVSS 8.4. EPSS: 18.1% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3646, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3644, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-2210, published 2016-06-30. High severity, CVSS 7.3. EPSS: 11.4% chance of exploitation in the next 30 days. Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…