Symantec Encryption Management Server Email Attachments Script Insertion Vulnerability

A vulnerability has been identified in Symantec Encryption Management Server, which can be exploited by malicious users to conduct script insertion attacks.

Certain unspecified input related to encrypted email attachments is not properly sanitised within the Web Email Protection component before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site if malicious data is viewed.