Broadcom vulnerabilities, page 3
817 vulnerabilities
Known vulnerabilities in Broadcom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 259 products.
CVE-2018-6448broadcomfabric_operating_system
EPSS score1.44%
A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on the vulnerable host.CVE-2018-6436broadcomfabric_operating_system+1EPSS score0.36%
A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6433broadcomfabric_operating_system+1EPSS score0.34%
A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the export file access restrictions and initiate a file copy from the source to a remote system.CVE-2018-6438broadcomfabric_operating_system+1EPSS score0.36%
A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6439broadcomfabric_operating_system+1EPSS score0.35%
A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6446broadcombrocade_network_advisorEPSS score1.35%
A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.CVE-2018-6590broadcomca_api_developer_portal+1EPSS score0.75%
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.CVE-2018-6442broadcomfabric_operating_system+1EPSS score2.14%
A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.CVE-2003-0997broadcomunicenter_remote_control_hostEPSS score1.31%
Unknown "Denial of Service Attack" vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to cause a denial of service (CPU consumption in URC host service).CVE-2003-0996broadcomunicenter_remote_control_hostEPSS score0.38%
Unknown "System Security Vulnerability" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to gain privileges via the help interface.CVE-2003-0998broadcomunicenter_remote_control+3EPSS score0.37%
Unknown "potential system security vulnerability" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account.CVE-2013-2630broadcomservice_desk_managerEPSS score0.94%
Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.CVE-2013-5016broadcomsymantec_critical_system_protectionEPSS score2.35%
Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.CVE-2013-5968broadcomsiteminder+1EPSS score2.62%
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (double quote) character.CVE-2021-21981broadcomvmware_nsx-t_data_centerEPSS score0.22%
VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level.CVE-2021-40438apache software foundationapache http server+101KEVRansomwareEPSS score100.00%
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.CVE-2021-26314amdall supported processors+8EPSS score0.61%
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.CVE-2021-26313amdall supported processors+9EPSS score0.33%
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.CVE-2021-42772broadcomemulex_hba_manager+1EPSS score1.28%
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticatedCVE-2021-42775broadcomemulex_hba_managerEPSS score0.99%
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a vulnerability in the remote firmware download feature that could allow a user to place or replace an arbitrary file on the remote host. In non-secure mode, the user is unauthenticated.