CVE-2023-23949

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser...

CVE-2023-23949

An authenticated user can exploit a cross-site scripting (XSS) vulnerability in Symantec Identity Manager versions 14.3 CP3 , 14.4.1 , and 14.4.2 . The root cause is the improper neutralization of input during web page generation , which allows an attacker to supply and execute malicious HTML and...