broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
CVE-2018-6447 MEDIUM
Component: fabric_operating_system

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, ...

📅 2020-09-25
CVSS 5.4 Dossier →
CVE-2020-5419 MEDIUM
Component: rabbitmq_server

RabbitMQ versions 3.8.x prior to 3.8.7 are prone to a Windows-specific binary planting security vulnerability that allows for arbitrary code execution...

📅 2020-08-31
CVSS 6.7 Dossier →
CVE-2018-6446 CRITICAL
Component: brocade_network_advisor

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration...

📅 2020-06-29
CVSS 9.8 Dossier →
CVE-2020-12740 CRITICAL
Component: tcpreplay

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation. The issue is being triggered in the function get_ipv...

📅 2020-05-08
CVSS 9.1 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information....

📅 2020-04-15
CVSS 6.5 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration act...

📅 2020-04-15
CVSS 4.3 Dossier →
CVE-2020-11658 CRITICAL
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization....

📅 2020-04-15
CVSS 9.8 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges....

📅 2020-04-15
CVSS 8.8 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect ...

📅 2020-04-15
CVSS 6.1 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect a...

📅 2020-04-15
CVSS 6.1 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks....

📅 2020-04-15
CVSS 6.1 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw a...

📅 2020-04-15
CVSS 7.5 Dossier →
Component: ca_api_developer_portal

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data....

📅 2020-04-15
CVSS 8.1 Dossier →
Component: advanced_secure_gateway

The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance manageme...

📅 2020-04-10
CVSS 6.5 Dossier →
CVE-2020-8012 CRITICAL
Component: unified_infrastructure_management

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller)...

📅 2020-02-18
CVSS 9.8 Dossier →
Component: unified_infrastructure_management

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (co...

📅 2020-02-18
CVSS 7.5 Dossier →
CVE-2020-8010 CRITICAL
Component: unified_infrastructure_management

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (cont...

📅 2020-02-18
CVSS 9.8 Dossier →
Component: fabric_operating_system

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used be...

📅 2020-02-05
CVSS 7.5 Dossier →
Component: fabric_operating_system

Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a com...

📅 2020-02-05
CVSS 7.5 Dossier →
Component: brcmfmac_driver

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac...

📅 2020-01-16
CVSS 7.9 Dossier →
Component: brcmfmac_driver

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on ...

📅 2020-01-16
CVSS 7.9 Dossier →
Component: ca_automic_dollar_universe

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate pr...

📅 2020-01-08
CVSS 7.8 Dossier →
CVE-2019-19518 CRITICAL
Component: ca_automic_sysload

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows ...

📅 2020-01-08
CVSS 9.8 Dossier →
Component: ca_client_automation

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to g...

📅 2019-12-20
CVSS 7.3 Dossier →
Page 13 of 24 (576 Total Records)