SP
Product
Symantec Privileged Access Management
19
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 4High 6Medium 9Low 0
Watch
Add Symantec Privileged Access Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24507 | 8.9 | Jan 30 | This vulnerability allows appliance compromise at boot time Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2025-24505 | 8.8 | Jan 30 | This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file Affected: 3.4.6; 4.1.0 through 4.1.8 |
| CVE-2022-25625 | 8.8 | Aug 26 | A malicious unauthorized PAM user can access the administration configuration data and change the values Affected: 3.4.0.0 before 3.4.6.05; 4.0.0.0 before 4.0.0.05; 4.0.1.0 before 4.0.1.19; 4.0.2.0 before 4.0.2.04; 4.0.3.0 before 4.0.3.01; 4.1.0.0 before 4.1.0.10 |
| CVE-2025-24500 | 8.7 | Jan 30 | The vulnerability allows an unauthenticated attacker to access information in PAM database Affected: 3.4.6; 4.1.0 through 4.1.8; 4.2.0 |
| CVE-2024-38494 | 8.6 | Jul 15 | Symantec Privileged Access Manager Remote Command Execution vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
| CVE-2024-38491 | 8.4 | Jul 15 | Symantec Privileged Access Manager SQL Injection vulnerability Affected: 4.1.0 - 4.1.7; 3.4.6 |
Showing 6