Identity Manager
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-25628 | Hig | 0.57 | 8.8 | 0.01 | Dec 16, 2022 | An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 | ||
| CVE-2022-25626 | Med | 0.35 | 5.3 | 0.01 | Dec 16, 2022 | An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session. |
- risk 0.57cvss 8.8epss 0.01
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
- risk 0.35cvss 5.3epss 0.01
An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.