Broadcom Symantec Identity Manager vulnerabilities

CVE-2023-23949 [MEDIUM] CWE-79 CVE-2023-23949: An authenticated user can supply malicious HTML and JavaScript code that will be executed in the cli An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.

CVE-2023-23951 [MEDIUM] CWE-79 CVE-2023-23951: Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application

CVE-2023-23950 [MEDIUM] CWE-79 CVE-2023-23950: User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two r User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.