Micro Focus Secure Messaging Gateway vulnerabilities

3 CVEs affecting Micro Focus Secure Messaging Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11852, published 2020-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-12464, published 2018-06-29. Critical severity, CVSS 9.8. EPSS: 80.7% chance of exploitation in the next 30 days. A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements…
CVE-2018-12465, published 2018-06-29. High severity, CVSS 7.2. EPSS: 80% chance of exploitation in the next 30 days. An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute…
CVE-2020-11852, published 2020-08-07. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user…