Arbitrary file upload in Broadcom Symantec Privileged Access Management

CVE-2025-24505

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file.

Vulnerability class: Unrestricted File Upload

EPSS: 0.003 (21.2th percentile) — read the EPSS interpretation.