CVE-2022-25629

An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).

Score

CVSS 3.1 5.4 Medium

Status

Modified - secure@symantec.com

Published

2022-12-09

Last modified

2025-04-23

Weaknesses

CWE-79

Affected products

• Messaging Gateway (Symantec)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21115