SP
Product
Symantec Privileged Access Management
19
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 9Low 0
Watch
Add Symantec Privileged Access Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38492 | 9.4 | Jul 15 | Symantec Privileged Access Manager Remote Command Execution vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-36456 | 9.4 | Jul 15 | Symantec Privileged Access Manager Remote Command Execution vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-36455 | 9.4 | Jul 15 | Symantec Privileged Access Manager Remote Command Execution vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2025-24503 | 9.3 | Jan 30 | A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2025-24507 | 8.9 | Jan 30 | This vulnerability allows appliance compromise at boot time Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2025-24505 | 8.8 | Jan 30 | This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file Affected: 3.4.6; 4.1.0 through 4.1.8 |
| CVE-2022-25625 | 8.8 | Aug 26 | A malicious unauthorized PAM user can access the administration configuration data and change the values Affected: 3.4.0.0 before 3.4.6.05; 4.0.0.0 before 4.0.0.05; 4.0.1.0 before 4.0.1.19; 4.0.2.0 before 4.0.2.04; 4.0.3.0 before 4.0.3.01; 4.1.0.0 before 4.1.0.10 |
| CVE-2025-24500 | 8.7 | Jan 30 | The vulnerability allows an unauthenticated attacker to access information in PAM database Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2024-38494 | 8.6 | Jul 15 | Symantec Privileged Access Manager Remote Command Execution vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-38491 | 8.4 | Jul 15 | Symantec Privileged Access Manager SQL Injection vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-38493 | 6.1 | Jul 15 | Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2025-24506 | 5.3 | Jan 30 | A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2025-24504 | 5.3 | Jan 30 | An improper input validation the CSRF filter results in unsanitized user input written to the application logs Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2025-24502 | 5.3 | Jan 30 | An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client… Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2025-24501 | 5.3 | Jan 30 | An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2024-38495 | 5.3 | Jul 15 | Symantec Privileged Access Manager User Enumeration vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-36457 | 5.3 | Jul 15 | Symantec Privileged Access Manager Authentication Bypass vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-38496 | 5.1 | Jul 15 | Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-36458 | 5.1 | Jul 15 | Symantec Privileged Access Manager Privilege Escalation vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
Showing 19