Filtered by vendor Broadcom Subscriptions
Filtered by product Symantec Identity Manager Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-23949 1 Broadcom 2 Symantec Identity Governance And Administration, Symantec Identity Manager 2024-08-02 5.4 Medium
An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
CVE-2023-23951 1 Broadcom 2 Symantec Identity Governance And Administration, Symantec Identity Manager 2024-08-02 6.1 Medium
Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application
CVE-2023-23950 1 Broadcom 2 Symantec Identity Governance And Administration, Symantec Identity Manager 2024-08-02 6.1 Medium
User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.