PT-2025-32529 · Broadcom · Symantec Pgp Encryption

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A stored Cross-Site Scripting XSS vulnerability occurs when the server does not properly validate or encode user-provided data. Recommendations: At the moment, there is no information about a newer...

Broadcom Symantec PGP Encryption 安全漏洞

Broadcom Symantec PGP Encryption is a data encryption software from Broadcom, Inc. A security vulnerability exists in Broadcom Symantec PGP Encryption that originates from the server not properly validating or encoding user input data, which could lead to a stored cross-site scripting attack...

Broadcom Symantec IT Management Suite 安全漏洞

Broadcom Symantec IT Management Suite is a software for managing the configuration of remediation applications and operating systems from Broadcom Corporation USA. A security vulnerability exists in Broadcom Symantec IT Management Suite that originates from account connection credentials that can...

PT-2025-28127 · Broadcom · Symantec It Management Suite

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns the extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage. Recommendations: At the moment, there is no information about a newer...

PT-2025-28075

Name of the Vulnerable Software and Affected Versions: Broadcom Symantec Endpoint Management Suite Altiris affected versions not specified Description: Remote attackers can execute arbitrary code in the context of the vulnerable service process. The vulnerability was discovered during a red team...

Broadcom Symantec IT Management Suite 安全漏洞

Broadcom Symantec IT Management Suite is a software for managing the configuration of remediation applications and operating systems from Broadcom Corporation USA. A security vulnerability exists in Broadcom Symantec IT Management Suite that originates from a remote attacker being able to execute...

Popular Chrome Extensions Found Leaking Data via Unencrypted Connections

Popular Chrome extensions exposed user data by sending it over unencrypted HTTP, raising privacy concerns. Symantec urges caution for users...

CVE-2023-23957

An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4...

CVE-2022-25628

An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4...

CVE-2022-37017

Symantec Endpoint Protection Windows agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User...

CVE-2022-37016

Symantec Endpoint Protection Windows agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

CVE-2022-25631

Symantec Endpoint Protection, prior to 14.3 RU6 14.3.9210.6000, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated...

CVE-2022-25627

An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4...

CVE-2022-25623

The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SYSTEM level through registry manipulations...

CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

CVE-2021-30642

An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges...

CVE-2021-30648

The Symantec Advanced Secure Gateway ASG and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance...

CVE-2020-12593

Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

CVE-2020-5837

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...

CVE-2020-5835

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...