CVE-2022-25628 An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4

Description

An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Symantec Identity Governance and Administration	Versions non publiées

Autres CVE de Symantec Identity Governance and Administration

Les 3 CVE de Symantec Identity Governance and Administration →

CVE-2022-25626 An unauthenticated user can access Identity Manager’s management console specific page URLs 5.3 Moyenne CVE-2022-25627 An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on… 6.7 Moyenne