Description
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Symantec Identity Governance and Administration | 14.3, 14.4 | — |
High · 8.8
CVE-2022-25628
EUVD-2022-30288GHSA-2jx3-p89p-3f69
An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
Published Dec 16, 2022 · Updated Apr 18, 2025 · Assigned by symantec