CVE-2017-6323

CVE-2017-6323 affects Symantec Management Console versions prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6 and ITMS 7.6_POST_HF7. Root cause is processing XML input with a reference to an external entity by a weakly configured XML parser (XXE). Potential impact includes disclosure of confidential data, ...

Symantec Management Console XSS/XXE Issues

SUMMARY Symantec has released an update to address two issues that were discovered in the Symantec Management Console. AFFECTED PRODUCTS Symantec Management Console --- CVE | Affected Versions | Remediation CVE-2017-6322 CVE-2017-6323 | Prior to ITMS 8.1 RU1, ITMS 8.0POSTHF6 & ITMS 7.6POSTHF7 |...