VendorsBroadcomsymantec_identity_governance_and_administration14.3
Vulnerabilities

Broadcom Symantec Identity Governance And Administration (IGA) 14.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Published 2022-12-16 · Modified
8.8EPSS 0.009
CVE-2023-23949
An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
Published 2023-01-24 · Modified
8.1EPSS 0.006
CVE-2022-25627
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4
Published 2022-12-16 · Modified
6.7EPSS 0.009
CVE-2023-23950
User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.
Published 2023-01-24 · Modified
6.1EPSS 0.005
CVE-2023-23951
Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application
Published 2023-01-24 · Modified
6.1EPSS 0.005
CVE-2022-25626
An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.
Published 2022-12-16 · Modified
5.3EPSS 0.007