CVE-2023-23949 - An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser

Back Back to CVE browser

HIGH

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser

Published Jan 24, 2023

8.1

HIGH

CVSS 3.1

EPSS 0.56%

Description

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.

Affected products

Vendor n/a Product Symantec Identity Management And Governance Default
n/a
- Version
  14.3, 14.4.1, 14.4.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Symantec Identity Management And Governance

n/a

Version	Status	Constraints
14.3, 14.4.1, 14.4.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-779

CWE-79

Cross-site Scripting (XSS)

References (1)

https://support.broadcom.com/external/content/SecurityAdvisories/0/21174
Vendor Advisory

Link	Providers	Tags
https://support.broadcom.com/external/content/SecurityAdvisories/0/21174		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Jan 24, 2023

Updated Apr 2, 2025

Reserved Jan 19, 2023

Link CVE-2023-23949

CISA Vulnrichment

Updated Apr 2, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-23949

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-23949