Broadcom Symantec Privileged Access Management

• CVE-2025-24507 High 8.9 This vulnerability allows appliance compromise at boot time. 0.2%
• CVE-2025-24506 Medium 5.3 A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types. 0.3%
• CVE-2025-24505 High 8.8 This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file. 0.3%
• CVE-2025-24504 Medium 5.3 An improper input validation the CSRF filter results in unsanitized user input written to the application logs. 0.2%
• CVE-2025-24503 Critical 9.3 A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server. 0.2%
• CVE-2025-24502 Medium 5.3 An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address. 0.2%
• CVE-2025-24501 Medium 5.3 An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request. 0.3%
• CVE-2025-24500 High 8.7 The vulnerability allows an unauthenticated attacker to access information in PAM database. 0.2%
• CVE-2024-38496 Medium 5.1 Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability 0.2%
• CVE-2024-38495 Medium 5.3 Symantec Privileged Access Manager User Enumeration vulnerability 0.3%
• CVE-2024-38494 High 8.6 Symantec Privileged Access Manager Remote Command Execution vulnerability 0.6%
• CVE-2024-38493 Medium 6.8 Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability 0.3%
• CVE-2024-38492 Critical 9.4 Symantec Privileged Access Manager Remote Command Execution vulnerability 0.9%
• CVE-2024-38491 High 8.4 Symantec Privileged Access Manager SQL Injection vulnerability 0.3%
• CVE-2024-36458 Medium 5.1 Symantec Privileged Access Manager Privilege Escalation vulnerability 0.2%
• CVE-2024-36457 Medium 5.3 Symantec Privileged Access Manager Authentication Bypass vulnerability 0.3%
• CVE-2024-36456 Critical 9.4 Symantec Privileged Access Manager Remote Command Execution vulnerability 0.9%
• CVE-2024-36455 Critical 9.4 Symantec Privileged Access Manager Remote Command Execution vulnerability 0.5%