Symantec Identity Manager Security Vulnerabilities

CVE-2023-23949

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client...

CVE-2023-23950

User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two...

CVE-2023-23951

Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the...