CVE-2022-25627

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-16 · updated 2026-06-17
Weakness: CWE-284

Description

An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4

Affected products

Symantec Identity Governance and Administration: 14.3, 14.4

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/21136
https://support.broadcom.com/external/content/SecurityAdvisories/0/21136

Get alerted when CVE-2022-25627 or the next vulnerability affects your stack