broadcom

687 tracked vulnerabilities.

CVE-2018-13826 CRITICAL
Broadcom Project Portfolio Management < 14.3 - XXE
Aug 30, 2018
CVSS 9.1
EPSS 0.02
CVE-2018-13825 MEDIUM
Broadcom Project Portfolio Management < 14.3 - XSS
Aug 30, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-13824 CRITICAL
Broadcom Project Portfolio Management < 14.3 - SQL Injection
Aug 30, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-13823 HIGH
Broadcom Project Portfolio Management < 14.3 - XXE
Aug 30, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-13822 HIGH
Broadcom Project Portfolio Management < 14.3 - Insufficiently Protected Credentials
Aug 30, 2018
CVSS 7.5
EPSS 0.01
CVE-2018-6590 MEDIUM
CA API Developer Portal 4.x < 4.2.5.3 - Reflected Cross-Site Scripting
Aug 03, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-13112 HIGH
Tcpreplay 4.3.0 beta1 - Denial of Service via Crafted Packets in get_l2len
Jul 03, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-9029 CRITICAL
Broadcom Privileged Access Manager 2.x < 3.0.0 - SQL Injection
Jun 18, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-9028 HIGH
Broadcom Privileged Access Manager 2.x < 3.0.0 - Inadequate Encryption Strength for Passwords
Jun 18, 2018
CVSS 7.5
EPSS 0.01
CVE-2018-9026 HIGH
CA Privileged Access Manager 2.x - Session Fixation
Jun 18, 2018
CVSS 7.5
EPSS 0.01
CVE-2018-9025 HIGH
Broadcom Privileged Access Manager 2.x < 3.0.0 - Log Poisoning via Crafted Input
Jun 18, 2018
CVSS 7.5
EPSS 0.01
CVE-2018-9024 MEDIUM
Broadcom Privileged Access Manager 2.x - Improper Authentication
Jun 18, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-9023 HIGH
Broadcom Privileged Access Manager 2.x < 3.0.0 - Authenticated Remote Code Execution via update_crld Script
Jun 18, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-9022 CRITICAL
Broadcom Privileged Access Manager < 2.8.2 - Unauthenticated Remote Code Execution via Configuration File Poisoning
Jun 18, 2018
CVSS 9.8
EPSS 0.20
CVE-2018-9021 CRITICAL
Broadcom Privileged Access Manager < 2.8.2 - Authentication Bypass and Remote Command Execution
Jun 18, 2018
CVSS 9.8
EPSS 0.19
CVE-2018-5241 CRITICAL
Symantec ASG/ProxySG <6.7 - Auth Bypass
May 29, 2018
CVSS 9.8
EPSS 0.05
CVE-2018-1259 HIGH
Spring Data Commons 1.13-1.13.11 & 2.0-2.0.6 - XXE via Projection-Based Request Binding
May 11, 2018
CVSS 7.5
EPSS 0.05
CVE-2018-1274 HIGH
Pivotal Software Spring Data Commons < 1.13.11 - Resource Allocation Without Limits
Apr 18, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-1273 CRITICAL KEVNUCLEI
Spring Data Commons < 1.13.11 - Unauthenticated Remote Code Execution via Property Binder
Apr 11, 2018
CVSS 9.8
EPSS 0.96
CVE-2017-18268 MEDIUM
Symantec IntelligenceCenter 3.3 - Return of the Bleichenbacher Oracle Threat (ROBOT) Attack
May 17, 2018
CVSS 5.9
EPSS 0.02
CVE-2017-15533 MEDIUM
Symantec SSL Visibility ROBOT Attack (3.8.4FC, 3.10 < 3.10.4.1, 3.11, 3.12 < 3.12.2.1)
May 17, 2018
CVSS 5.9
EPSS 0.02
CVE-2017-13678 MEDIUM
Symantec Advanced Secure Gateway and ProxySG - Stored Cross-Site Scripting in Management Console
Apr 11, 2018
CVSS 4.8
EPSS 0.01
CVE-2017-13677 HIGH
Symantec Advanced Secure Gateway and ProxySG - Denial of Service via Crafted HTTP/HTTPS Requests
Apr 11, 2018
CVSS 7.5
EPSS 0.05
CVE-2017-6227 MEDIUM
Brocade Fabric OS < 7.4.2b, 8.1.2, 8.2.0 - Denial of Service via Crafted IPv6 Router Advertisement Messages
Feb 08, 2018
CVSS 6.5
EPSS 0.01
CVE-2017-6225 MEDIUM
Brocade Fabric OS < 7.4.2b - Cross-Site Scripting in Web Management Interface
Feb 08, 2018
CVSS 6.1
EPSS 0.01
Products
fabric_operating_system 95 brocade_sannav 54 tcpreplay 50 brightstor_arcserve_backup 41 brocade_fabric_operating_system_firmware 26 rabbitmq_server 25 raid_controller_web_interface 22 sannav 20 brightstor_enterprise_backup 19 Symantec Privileged Access Management 17 advanced_secure_gateway 16 business_protection_suite 16 etrust_antivirus 16 etrust_intrusion_detection 16 BCM5820X 13 inoculateit 13 server_protection_suite 13 symantec_proxysg 13 arcserve_backup 12 brightstor_arcserve_backup_laptops_desktops 11 brocade_fabric_operating_system 11 etrust_ez_antivirus 11 symantec_critical_system_protection 11 ca_api_developer_portal 10 desktop_management_suite 10 dx_netops_spectrum 10 etrust_ez_armor 10 etrust_secure_content_manager 10 privileged_access_manager 10 etrust_antivirus_gateway 9
Quick Filters
Critical CVEs With Exploits In CISA KEV