CVE-2024-38493 — Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to th…
Published: 2024-07-15 · CVSS: 6.8 · CVSS 4.0
A reflected cross-site scripting (XSS) vulnerability exists in the PAM UI web interface. A remote attacker able to convince a PAM user to click on a specially crafted link to the PAM UI web interface could potentially execute arbitrary client-side code in the context of PAM UI.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7