Christopher Vella

**Name of the Vulnerable Software and Affected Versions** No specific software or versions mentioned. **Description** The issue allows an authenticated user to inject malicious HTML and JavaScript code, which will be executed in the client's browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned. **Description** The issue allows a user's supplied input, typically a CRLF sequence, to be used in splitting a returning response into two responses. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Broadcom Symantec Identity Manager and Symantec Identity Governance and Administration (affected versions not specified) **Description** The issue is related to the Oracle LDAP Attribute Handler component, which fails to protect the web page structure. This can be exploited by a remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability also allows an attacker to enumerate Oracle LDAP attributes for the current user by modifying the query used by the application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do software vulnerável e versões afetadas** Windows Installer (versões afetadas não especificadas) **Descrição** O problema está relacionado a erros no gerenciamento de privilégios no componente Windows Installer dos sistemas operacionais Microsoft Windows. Isso pode permitir que um invasor eleve seus privilégios. A vulnerabilidade permite que invasores comprometam o sistema. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.