CVE-2014-1643

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-07 · updated 2026-06-17
Weakness: CWE-264

Description

The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.

Affected products

Symantec Corporation Symantec Encryption Management Server (SEMS): through 3.3.1; 3.3.0, 3.3.0-mp1, 3.3.0-mp2

References

http://www.securityfocus.com/bid/65300
http://www.securitytracker.com/id/1029729
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140205_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/90946
http://www.securityfocus.com/bid/65300
http://www.securitytracker.com/id/1029729
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140205_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/90946

Get alerted when CVE-2014-1643 or the next vulnerability affects your stack