medium6.1
CVE-2024-38493
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface.
Impact
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Symantec Privileged Access Management | from 4.1.0 through 4.1.7 |