Identity Manager
by Symantec
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-25628 | Hig | 0.57 | 8.8 | 0.01 | Dec 16, 2022 | An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 | ||
| CVE-2022-25627 | Med | 0.44 | 6.7 | 0.01 | Dec 16, 2022 | An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4 |
- risk 0.57cvss 8.8epss 0.01
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
- risk 0.44cvss 6.7epss 0.01
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4