CVE-2024-38493

Summary

A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.

Affected Software

VendorProductVersion RangeStatus
BroadcomSymantec Privileged Access Management4.1.0 - 4.1.7affected
BroadcomSymantec Privileged Access Management3.4.6affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References