6 matches found
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
8.8CVSS7.1AI score0.00897EPSS
SaveExploits0References1
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
8.8CVSS5.8AI score0.00897EPSS
SaveExploits0References1
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...
8.8CVSS0.00897EPSS
SaveExploits0References1
CVE-2022-25628
CVE-2022-25628 describes an XML External Entity (XXE) injection vulnerability in the Symantec Identity Manager 14.4 Management Console . An authenticated user can trigger XXE, with potential data exposure or other malicious activity as implied by the vulnerability class. The CVSS data from the en...
8.8CVSS8.7AI score0.00897EPSS
SaveExploits0References1Affected Software1
20