Broadcom vulnerabilities
817 vulnerabilities
Known vulnerabilities in Broadcom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 259 products.
Products
50 of 259- Fabric Operating System145 vulnerabilities
- Brocade Sannav58 vulnerabilities
- Tcpreplay50 vulnerabilities
- Rabbitmq Server47 vulnerabilities
- Brightstor Arcserve Backup41 vulnerabilities
- Brocade Fabric Operating System37 vulnerabilities
- LSI Storage Authority (Lsa)22 vulnerabilities
- Raid Controller Web Interface22 vulnerabilities
- Sannav20 vulnerabilities
- Brightstor Enterprise Backup19 vulnerabilities
- Symantec Privileged Access Management19 vulnerabilities
- Brocade Active Support Connectivity Gateway18 vulnerabilities
- Advanced Secure Gateway16 vulnerabilities
- Business Protection Suite16 vulnerabilities
- Etrust Intrusion Detection16 vulnerabilities
- Etrust Antivirus15 vulnerabilities
- Bcm5820X13 vulnerabilities
- Inoculateit13 vulnerabilities
- Server Protection Suite13 vulnerabilities
- Symantec Proxysg13 vulnerabilities
- Arcserve Backup11 vulnerabilities
- Brightstor Arcserve Backup Laptops Desktops11 vulnerabilities
- Etrust Ez Antivirus11 vulnerabilities
- Symantec Critical System Protection11 vulnerabilities
- Ca Api Developer Portal10 vulnerabilities
- Desktop Management Suite10 vulnerabilities
- Dx Netops Spectrum10 vulnerabilities
- Etrust Ez Armor10 vulnerabilities
- Etrust Secure Content Manager10 vulnerabilities
- Privileged Access Manager10 vulnerabilities
- Reactor Netty10 vulnerabilities
- Etrust Antivirus Gateway9 vulnerabilities
- Spring Web Services8 vulnerabilities
- Unicenter Network And Systems Management8 vulnerabilities
- Anti Virus For The Enterprise7 vulnerabilities
- Ca Automic Automation7 vulnerabilities
- Common Services7 vulnerabilities
- Spring Data Commons7 vulnerabilities
- Symantec Data Center Security Server7 vulnerabilities
- Unicenter Asset Management7 vulnerabilities
- Unicenter Remote Control7 vulnerabilities
- Vmware Avi Load Balancer7 vulnerabilities
- Etrust Admin6 vulnerabilities
- Etrust Integrated Threat Management6 vulnerabilities
- Internet Security Suite6 vulnerabilities
- Release Automation6 vulnerabilities
- Spring Tools6 vulnerabilities
- Symantec Identity Governance And Administration6 vulnerabilities
- Symantec Messaging Gateway6 vulnerabilities
- Brightstor Portal5 vulnerabilities
CVE-2026-19810broadcomsymantec endpoint detection and response
EPSS score0.17%
Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.CVE-2018-13822broadcomproject_portfolio_management+1EPSS score1.33%
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.CVE-2018-13824broadcomproject_portfolio_management+2EPSS score1.75%
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.CVE-2018-13826broadcomproject_portfolio_management+2EPSS score1.83%
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks.CVE-2018-13823broadcomproject_portfolio_management+2EPSS score1.88%
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.CVE-2018-13825broadcomproject_portfolio_management+2EPSS score0.90%
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.CVE-2018-13112broadcomtcpreplay+2EPSS score2.27%
get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep.CVE-2018-1259broadcomspring_data_commons+5EPSS score4.93%
Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data's projection-based request payload binding to access arbitrary files on the system.CVE-2018-1273apacheignite+6KEVRansomwareEPSS score96.96%
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.CVE-2018-1274broadcomspring_data_commons+4EPSS score1.93%
Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user (or attacker) can issue requests against Spring Data REST endpoints or endpoints using property path parsing which can cause a denial of service (CPU and memory consumption).CVE-2018-19634broadcomservice_desk_manager+2EPSS score1.33%
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.CVE-2018-19635broadcomservice_desk_manager+2EPSS score1.18%
CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.CVE-2018-19860broadcombcm4335c0_firmware+62EPSS score1.02%
Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command.CVE-2018-20553broadcomtcpreplay+2EPSS score1.25%
Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.CVE-2018-20552broadcomtcpreplay+2EPSS score1.25%
Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.CVE-2018-9025broadcomprivileged_access_manager+1EPSS score1.39%
An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.CVE-2018-9029broadcomprivileged_access_manager+1EPSS score1.73%
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.CVE-2018-9021broadcomprivileged_access_manager+1EPSS score9.61%
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.CVE-2018-9022broadcomprivileged_access_manager+1EPSS score12.80%
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.CVE-2018-9026broadcomprivileged_access_manager+1EPSS score1.32%
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.