Advisories · Technology
Broadcom Symantec Privileged Access Management.
Every CVE that names Broadcom Symantec Privileged Access Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.9 High
This vulnerability allows appliance compromise at boot time.
- Broadcom Symantec Privileged Access Management
- CVSS 5.3 Medium
Observable discrepancy in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- Information disclosure
- CVSS 8.8 High
Unrestricted file upload in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- Unrestricted file upload
- CVSS 5.3 Medium
Improper input validation in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- CWE-20
- CVSS 9.3 CriticalCritical · CVSS 9+
Session fixation in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- Authentication bypass
- CVSS 5.3 Medium
Session fixation in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- Authentication bypass
- CVSS 5.3 Medium
Improper input validation in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- CWE-20
- CVSS 8.7 High
Incorrect authorization in Broadcom Symantec Privileged Access Management
- Broadcom Symantec Privileged Access Management
- Broken access control
- CVSS 5.1 Medium
Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability
- Broadcom Symantec Privileged Access Management
- Information disclosure
- CVSS 5.3 Medium
Symantec Privileged Access Manager User Enumeration vulnerability
- Broadcom Symantec Privileged Access Management
- CVSS 8.6 High
Symantec Privileged Access Manager Remote Command Execution vulnerability
- Broadcom Symantec Privileged Access Management
- HTTP request smuggling
- CVSS 6.8 Medium
Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability
- Broadcom Symantec Privileged Access Management
- Cross-site scripting (XSS)
- CVSS 9.4 CriticalCritical · CVSS 9+
Symantec Privileged Access Manager Remote Command Execution vulnerability
- Broadcom Symantec Privileged Access Management
- Command injection
- CVSS 8.4 High
Symantec Privileged Access Manager SQL Injection vulnerability
- Broadcom Symantec Privileged Access Management
- CVSS 5.1 Medium
Symantec Privileged Access Manager Privilege Escalation vulnerability
- Broadcom Symantec Privileged Access Management
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Symantec Privileged Access Manager Authentication Bypass vulnerability
- Broadcom Symantec Privileged Access Management
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
Symantec Privileged Access Manager Remote Command Execution vulnerability
- Broadcom Symantec Privileged Access Management
- Code injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Symantec Privileged Access Manager Remote Command Execution vulnerability
- Broadcom Symantec Privileged Access Management
- CWE-665