High severity8.8NVD Advisory· Published Dec 16, 2022· Updated Jun 17, 2026
CVE-2022-25628
CVE-2022-25628
Description
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.3:*:*:*:*:*:*:*
- cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4:*:*:*:*:*:*:*
- Symantec/Identity Managerdescription
- Range: 14.4
- Range: 14.4
Patches
Vulnerability mechanics
References
1- support.broadcom.com/external/content/SecurityAdvisories/0/21136nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.