Symantec Identity Manager (Broadcom) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2023-01-26. Vendor: Broadcom.

CVEs of Symantec Identity Manager

• CVE-2023-23949 - CVSS 8.1 (high), 2023-01-26: An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
• CVE-2023-23951 - CVSS 6.1 (medium), 2023-01-26: Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application
• CVE-2023-23950 - CVSS 6.1 (medium), 2023-01-26: User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.