Vulnerabilities (CVE)

Filtered by vendor Broadcom Subscribe
Filtered by product Symantec Identity Manager
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23951 1 Broadcom 2 Symantec Identity Governance And Administration, Symantec Identity Manager 2024-11-21 N/A 6.1 MEDIUM
Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application
CVE-2023-23950 1 Broadcom 2 Symantec Identity Governance And Administration, Symantec Identity Manager 2024-11-21 N/A 6.1 MEDIUM
User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.
CVE-2023-23949 1 Broadcom 2 Symantec Identity Governance And Administration, Symantec Identity Manager 2024-11-21 N/A 5.4 MEDIUM
An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.