Improper input validation in Broadcom Symantec Privileged Access Management

CVE-2025-24501

An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (20.6th percentile) — read the EPSS interpretation.