high8.8
CVE-2022-25628
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Impact
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Symantec Identity Governance And Administration | Versions 14.3, 14.4 |