2 matches found
CVE-2023-23949
An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4