CA Technologies, A Broadcom Company vulnerabilities

6 vulnerabilities

Known vulnerabilities in CA Technologies, A Broadcom Company products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

Products

6
7.5CVE-2020-29478broadcomca_service_catalog+1
EPSS score
1.18%
CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition.
9.8CVE-2019-13657broadcomca_performance_management+2
EPSS score
2.50%
CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security.
9.8CVE-2019-13658broadcomnetwork_flow_analysis+1
EPSS score
3.44%
CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security.
9.8CVE-2019-19230broadcomnolio+1
EPSS score
3.76%
An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.
8.8CVE-2019-7394ca technologies, a broadcom companyca risk authentication+3
EPSS score
2.82%
A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to gain additional privileges in some cases where an account has customized and limited privileges.
4.3CVE-2019-7393ca technologies, a broadcom companyca risk authentication+3
EPSS score
2.28%
A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive information in some cases.