Symantec Identity Governance and Administration
7 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Symantec Identity Governance and Administration, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Symantec Identity Governance and Administration CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 7 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High1
- Medium6
Latest CVEs
The 7 most recently published vulnerabilities affecting Symantec Identity Governance and Administration.
- CVE-2023-23957Open Redirection Vulnerability in Symantec Identity Portal 14.45.4
- CVE-2023-23951Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application6.1
- CVE-2023-23950User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.6.1
- CVE-2023-23949An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.5.4
- CVE-2022-25626An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.5.3
- CVE-2022-25628An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.48.8
- CVE-2022-25627An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.46.7
Product grouping is registry-driven, with AI assist and human review. How it works