Symantec Privileged Access Manager Reflected Cross Site Scripting vulnerability

A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types

An improper input validation the CSRF filter results in unsanitized user input written to the application logs

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client…

An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request

Symantec Privileged Access Manager User Enumeration vulnerability

Symantec Privileged Access Manager Authentication Bypass vulnerability

Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability

Symantec Privileged Access Manager Privilege Escalation vulnerability