CVEDB API

A malicious unauthorized PAM user can access the administration configuration data and change the values.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 46.5%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2022-25625

Broadcom » Symantec Privileged Access Management » Version: 3.4.0.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:3.4.0.0
Broadcom » Symantec Privileged Access Management » Version: 3.4.5.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:3.4.5.0
Broadcom » Symantec Privileged Access Management » Version: 3.4.6.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:3.4.6.0
Broadcom » Symantec Privileged Access Management » Version: 4.0.0.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:4.0.0.0
Broadcom » Symantec Privileged Access Management » Version: 4.0.1.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:4.0.1.0
Broadcom » Symantec Privileged Access Management » Version: 4.0.2.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:4.0.2.0
Broadcom » Symantec Privileged Access Management » Version: 4.0.3.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:4.0.3.0
Broadcom » Symantec Privileged Access Management » Version: 4.1.0.0

cpe:2.3:a:broadcom:symantec_privileged_access_management:4.1.0.0