https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-23958.htmlhttps://patchthecve.com/cve/CVE-2023-23958.htmlWed, 17 Jun 2026 05:38:22 +0000MEDIUM 6.8: Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability. https://patchthecve.com/cve/CVE-2023-23957.htmlhttps://patchthecve.com/cve/CVE-2023-23957.htmlWed, 17 Jun 2026 05:38:22 +0000MEDIUM 5.4: An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4https://patchthecve.com/cve/CVE-2022-25630.htmlhttps://patchthecve.com/cve/CVE-2022-25630.htmlWed, 17 Jun 2026 04:33:48 +0000MEDIUM 5.4: An authenticated user can embed malicious content with XSS into the admin group policy page.https://patchthecve.com/cve/CVE-2022-25629.htmlhttps://patchthecve.com/cve/CVE-2022-25629.htmlWed, 17 Jun 2026 04:33:48 +0000MEDIUM 5.4: An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executed on the annotations page (Annotation Text Column).https://patchthecve.com/cve/CVE-2022-37015.htmlhttps://patchthecve.com/cve/CVE-2022-37015.htmlWed, 17 Jun 2026 04:54:28 +0000CRITICAL 9.8: Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from