Skip to content
OpenAdvisories

Product · Micro Focus

Secure Messaging Gateway

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2018-12465 Public exploit EPSS 80%

    Remote Code Execution in Micro Focus Secure Messaging Gateway

    An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in co…

  • Critical 10.0
    CVE-2018-12464 Public exploit EPSS 81%

    Unauthenticated SQL injection in Micro Focus Secure Messaging Gateway

    A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an ad…