The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.
Base Score: 6.5
Impact Score: 6.4
Exploitability Score: 8
Base Score: 8.8
Impact Score: 5.9
Exploitability Score: 2.8
cpe:2.3:a:symantec:message_gateway:*:*:*:*:*:*:*:* versions up to 10.6.3-2 (inclusive)