CVE-2020-5838: Symantec It Analytics

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Symantec IT Analytics, prior to 2.9.1, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can potentially enable attackers to inject client-side scripts into web pages viewed by other users.

Affected products

• Symantec It Analytics: before 2.9.1 (fixed in 2.9.1)

Published 2020-05-13. Last modified 2026-06-17.