CVE-2023-23951

The CVE-2023-23951 issue affects Broadcom Symantec Identity Manager and Symantec Identity Governance and Administration (Oracle LDAP Attribute Handler). Affected versions permit enumeration of the current user’s Oracle LDAP attributes by modifying the query used by the application, and PT-2023-88...

CVE-2023-23949

An authenticated user can exploit a cross-site scripting (XSS) vulnerability in Symantec Identity Manager versions 14.3 CP3 , 14.4.1 , and 14.4.2 . The root cause is the improper neutralization of input during web page generation , which allows an attacker to supply and execute malicious HTML and...

CVE-2023-23950

Technical details about CVE-2023-23950 are not present in the provided connected documents; the materials only restate the CRLF-splitting vulnerability without product/version specifics. Monitor for updates.