Is Symantec Protection Engine Impacted by CVE-2022-25857 and CVE-2022-1471?

Products

• Protection Engine for NAS
• Protection Engine for Cloud Services

Issue/Introduction

You would like to know if Symantec Protection Engine (SPE) is impacted by below CVE related to snakeyaml

1. CVE-2022-25857 - https://nvd.nist.gov/vuln/detail/cve-2022-25857
2. CVE-2022-1471 - https://nvd.nist.gov/vuln/detail/cve-2022-1471

Environment

SPE 9.3.1

Resolution

CVE	Component	Version Shipped	Verdict	Short Description
CVE-2022-25857	org.yaml:snakeyaml	2.5	Not Vulnerable	Shipped version 2.5 is outside >= 0, < 1.31
CVE-2022-1471	snakeyaml	2.5	Not Vulnerable	Shipped version 2.5 is outside >= 0, < 2.0