CVE-2018-12243

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.6.6

Description The issue is related to a XML external entity (XXE) exploit. This type of issue occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser, allowing access to files that should not normally be accessible through file URI schemes or relative paths in the system identifier.

Recommendations For versions prior to 10.6.6, update to version 10.6.6 or later to resolve the issue.