VendorsBroadcomsymantec_identity_governance_and_administration14.4
Vulnerabilities

Broadcom Symantec Identity Governance And Administration (IGA) 14.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Published 2022-12-16 · Modified
8.8EPSS 0.009
CVE-2022-25627
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4
Published 2022-12-16 · Modified
6.7EPSS 0.009
CVE-2022-25626
An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.
Published 2022-12-16 · Modified
5.3EPSS 0.007