An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
2022-12-16T16:15:21.650
2025-04-18T14:15:18.087
Modified
CVSSv3.1: 8.8 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | broadcom | symantec_identity_governance_and_administration | 14.3 | Yes |
Application | broadcom | symantec_identity_governance_and_administration | 14.4 | Yes |