Skip to content

Product

microfocus secure messaging gateway vulnerabilities

3 published CVES affecting microfocus secure messaging gateway, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest microfocus secure messaging gateway CVEs

Newest publication first

  1. CVE-2020-11852 DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user wi...

    Published
    HighCVSS 8.8 EPSS 1.4%

    DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the ca...

  2. CVE-2018-12465 Remote Code Execution in Micro Focus Secure Messaging Gateway

    Published
    HighCVSS 7.2 EPSS 80.0% Framework module Public exploit

    An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in conjunction with CVE-20...

  3. CVE-2018-12464 Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

    Published
    CriticalCVSS 9.8 EPSS 80.7% Framework module Public exploit

    A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.