Description
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Broadcom | Symantec Privileged Access Management | 4.1.0 - 4.1.7, 3.4.6 | — |