Cross-Site Scripting Vulnerability in Broadcom Products
CVE-2023-23949

5.4MEDIUM

Key Information:

Vendor
Broadcom
Status
Symantec Identity Management And Governance
Vendor
CVE Published:
26 January 2023

Summary

An authenticated user can leverage this vulnerability by injecting malicious HTML and JavaScript code into the application's interface. This code is subsequently executed in the client’s browser, potentially leading to unauthorized actions or data theft. Organizations using affected Broadcom products must implement appropriate security measures to mitigate the risks posed by this vulnerability.

Affected Version(s)

Symantec Identity Management And Governance 14.3, 14.4.1, 14.4.2

References

https://support.broadcom.com/external/content/SecurityAdv...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.