CVE-2022-25630

An authenticated user can embed malicious content with XSS into the admin group policy page...

PT-2022-17423 · Symantec · Messaging Gateway

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an authenticated user to embed malicious content with XSS into the admin group policy page. This could potentially lead to cross-site...

CVE-2022-25630

Broadcom Symantec Messaging Gateway is affected by CVE-2022-25630, a stored XSS vulnerability exploitable by an authenticated user on the admin group policy page. Public details describe an authenticated user injecting payloads via the AdminGroupPolicyFlow$save.flo endpoint, with the issue enabli...