description: An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
problem types: XML eXternal Entity injection (XXE)
affected:
{
vendor: n/a
product: Symantec Identity Governance and Administration
versions:
version: 14.3, 14.4, status: affected
}