Symantec VIP reporting "HTML Security Issues; Missing required headers" for VIP Cloud URLs

Products

• VIP Service

Issue/Introduction

3rd party security scans may report that the following Broadcom VIP links have a security vulnerability. The following URLs are all reporting "HTML Security Issues; Missing required headers":

• vip.symantec.com
• m.vip.symantec.com
• desktop.vip.symantec.com
• toolbar.vip.symantec.com
• idprotect.vip.symantec.com

Resolution

These security headers were resolved in our VIP Maintenance for August 2025.

Reference:  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/vip/cloud/vip-authentication-service-documentation-v127601624-d2278e47/VIP-Authentication-Services-Release-Notes/about-these-release-notes-v128468078-d2358e8/what-s-new-in-v130492880-d2358e39.html