Lucene search
+L

5333 matches found

CNVD
CNVD
added 2024/07/19 12:00 a.m.16 views

Broadcom Symantec Privileged Access Management File Upload Vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

9.4CVSS7.2AI score0.00939EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/19 12:00 a.m.19 views

Unspecified Vulnerability in Broadcom Symantec Privileged Access Management

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

5.1CVSS6.2AI score0.0025EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/19 12:00 a.m.8 views

Unspecified Vulnerability in Broadcom Symantec Privileged Access Management (CNVD-2024-36946)

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

5.1CVSS6.5AI score0.00203EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/19 12:00 a.m.14 views

Broadcom Symantec Privileged Access Management Input Validation Error Vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

9.4CVSS6.8AI score0.00475EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/19 12:00 a.m.36 views

Broadcom Symantec Privileged Access Management SQL Injection Vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

8.4CVSS7.3AI score0.00284EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/19 12:00 a.m.26 views

Unspecified Vulnerability in Broadcom Symantec Privileged Access Management (CNVD-2024-36949)

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

5.3CVSS6.3AI score0.00281EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/19 12:00 a.m.17 views

Broadcom Symantec Privileged Access Management Code Injection Vulnerability

Broadcom Symantec Privileged Access Management Broadcom Symantec PAM is a security software from Broadcom, Inc. It helps prevent security breaches by protecting sensitive administrative credentials, controlling privileged user access, proactively enforcing security policies, and monitoring and...

9.4CVSS7.2AI score0.00939EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 2:16 p.m.26 views

CVE-2024-38496 Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability

The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships...

5.1CVSS0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/15 2:16 p.m.15 views

CVE-2024-38496 Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability

The vulnerability allows a malicious low-privileged PAM user to access information about other PAM users and their group memberships...

5.1CVSS6.5AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/15 2:16 p.m.60 views

CVE-2024-38496

CVE-2024-38496 affects Broadcom Symantec Privileged Access Management. A malicious, low-privileged PAM user can access information about other PAM users and their group memberships (an Insecure Direct Object Reference ). The connected documents confirm the vulnerability and general impact, but pr...

5.1CVSS6.2AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/15 2:13 p.m.56 views

CVE-2024-38495

CVE-2024-38495 concerns Broadcom Symantec Privileged Access Management (PAM). Multiple connected sources describe a vulnerability in an authentication mechanism that allows an attacker to learn IDs of all PAM users defined in the database. The available documents do not provide product version ra...

5.3CVSS6.7AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/15 2:13 p.m.20 views

CVE-2024-38495 Symantec Privileged Access Manager User Enumeration vulnerability

A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database...

5.3CVSS6.6AI score0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 2:13 p.m.27 views

CVE-2024-38495 Symantec Privileged Access Manager User Enumeration vulnerability

A specific authentication strategy allows a malicious attacker to learn ids of all PAM users defined in its database...

5.3CVSS0.00281EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 2:03 p.m.19 views

CVE-2024-38494 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request...

8.6CVSS0.00609EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/15 2:03 p.m.12 views

CVE-2024-38494 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request...

8.6CVSS7AI score0.00609EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/15 2:00 p.m.15 views

CVE-2024-38493 Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability

A reflected cross-site scripting XSS vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI...

6.8CVSS6AI score0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 2:00 p.m.38 views

CVE-2024-38493 Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability

A reflected cross-site scripting XSS vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI...

6.8CVSS0.00302EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/15 1:54 p.m.12 views

CVE-2024-38492 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

9.4CVSS7.5AI score0.00939EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 1:54 p.m.22 views

CVE-2024-38492 Symantec Privileged Access Manager Remote Command Execution vulnerability

This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file...

9.4CVSS0.00939EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/15 1:50 p.m.35 views

CVE-2024-38491 Symantec Privileged Access Manager SQL Injection vulnerability

The vulnerability allows an unauthenticated attacker to read arbitrary information from the database...

8.4CVSS0.00284EPSS
SaveExploits0References1
Rows per page
Query Builder