CVE-2022-25628: Broadcom Symantec Identity Governance And Administration

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4

Affected products

• Broadcom Symantec Identity Governance And Administration: version 14.3 only; version 14.4 only

Published 2022-12-16. Last modified 2026-06-17.