broadcom Vulnerability Advisory Catalog

Total 576 security vulnerabilities recorded for broadcom software and firmware.

← Back to All Vendors
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
CVE-2023-4329 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameS...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4328 MEDIUM
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user ...

๐Ÿ“… 2023-08-15
CVSS 5.5 Dossier →
CVE-2023-4327 MEDIUM
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user o...

๐Ÿ“… 2023-08-15
CVSS 5.5 Dossier →
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites...

๐Ÿ“… 2023-08-15
CVSS 7.5 Dossier →
CVE-2023-4325 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4324 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4323 CRITICAL
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup...

๐Ÿ“… 2023-08-15
CVSS 9.8 Dossier →
CVE-2023-4345 MEDIUM
Component: raid_controller_web_interface

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user...

๐Ÿ“… 2023-08-15
CVSS 6.5 Dossier →
Component: brocade_fabric_operating_system

An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthe...

๐Ÿ“… 2023-08-02
CVSS 5.3 Dossier →
Component: brocade_fabric_operating_system

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0....

๐Ÿ“… 2023-08-02
CVSS 7.1 Dossier →
Component: brocade_fabric_operating_system

A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric O...

๐Ÿ“… 2023-08-02
CVSS 6.3 Dossier →
Component: brocade_fabric_operating_system

Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could o...

๐Ÿ“… 2023-08-02
CVSS 7.8 Dossier →
Component: brocade_fabric_operating_system

A buffer overflow vulnerability in โ€œdiagstatusโ€ command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated use...

๐Ÿ“… 2023-08-02
CVSS 5.5 Dossier →
Component: brocade_fabric_operating_system

A buffer overflow vulnerability in โ€œsecpolicydeleteโ€ command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authentic...

๐Ÿ“… 2023-08-02
CVSS 5.5 Dossier →
Component: brocade_fabric_operating_system

Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files un...

๐Ÿ“… 2023-08-02
CVSS 5.5 Dossier →
Component: fabric_operating_system

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names ins...

๐Ÿ“… 2023-08-01
CVSS 7.8 Dossier →
Component: fabric_operating_system

The Brocade Fabric OS Commands โ€œconfiguploadโ€ and โ€œconfigdownloadโ€ before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers p...

๐Ÿ“… 2023-08-01
CVSS 6.8 Dossier →
Component: fabric_operating_system

Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as โ€œchassisdistributeโ€, โ€œrebootโ€, โ€œ...

๐Ÿ“… 2023-08-01
CVSS 5.5 Dossier →
Component: fabric_operating_system

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local au...

๐Ÿ“… 2023-08-01
CVSS 7.8 Dossier →
Component: advanced_secure_gateway

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability....

๐Ÿ“… 2023-06-01
CVSS 8.1 Dossier →
Component: advanced_secure_gateway

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability....

๐Ÿ“… 2023-06-01
CVSS 5.4 Dossier →
Component: advanced_secure_gateway

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability....

๐Ÿ“… 2023-06-01
CVSS 7.8 Dossier →
CVE-2023-23952 CRITICAL
Component: advanced_secure_gateway

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability....

๐Ÿ“… 2023-06-01
CVSS 9.8 Dossier →
Page 7 of 24 (576 Total Records)