Approved changes feed: RSS · Atom

cpe:2.3:a:broadcom:symantec_identity_governance_and_administration:14.4:*:*:*:*:*:*:*

part: a version: 14.4 update: *

VendorBroadcom (9814e701-1071-5d68-93ef-4536eaf59407)
ProductSymantec Identity Governance And Administration (777256c7-086e-5928-806a-577257648be3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25628 vulnerable 2026-06-08 05:41:46.181644 Details available
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Published: 2022-12-16T00:00:00.000Z
Updated: 2025-04-18T13:29:48.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25627 vulnerable 2026-06-08 05:41:46.181062 Details available
An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4
Published: 2022-12-16T00:00:00.000Z
Updated: 2025-04-18T13:30:49.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25626 vulnerable 2026-06-08 05:41:46.180578 Details available
An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.
Published: 2022-12-16T00:00:00.000Z
Updated: 2025-04-18T13:31:49.540Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.