CVE-2022-25626

5.3 mediumEPSS 0.7%

Medium (5.3) in broadcom symantec identity governance and administration. EPSS 0.7% chance of exploitation in the next 30 days.

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2022-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:symantec_identity_governance_and_administration

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/21136
https://support.broadcom.com/external/content/SecurityAdvisories/0/21136

Check your stack JSON