CVE-2022-25628
8.8HIGHAn authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Published: 12/16/2022Updated: 4/18/2025
Description
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
AI AnalysisPowered by AI
Affected Products
broadcomsymantec_identity_governance_and_administration
14.3
broadcomsymantec_identity_governance_and_administration
14.4
References
- https://support.broadcom.com/external/content/SecurityAdvisories/0/21136Release NotesVendor Advisory
- https://support.broadcom.com/external/content/SecurityAdvisories/0/21136Release NotesVendor Advisory