6.8
Moyenne
CVE-2024-38493 A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface
Description
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Symantec Privileged Access Management | 3.4.6 | Pas de correctif indiqué |
Références
- support.broadcom.com support.broadcom.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Symantec Privileged Access Management
Les 18 CVE de Symantec Privileged Access Management →
CVE-2025-24507
This vulnerability allows appliance compromise at boot time
8.9
Élevée
CVE-2025-24506
A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types
5.3
Moyenne
CVE-2025-24505
This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected…
8.8
Élevée
CVE-2025-24504
An improper input validation the CSRF filter results in unsanitized user input written to the application logs
5.3
Moyenne