Broadcom

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27785 1Broadcom 1Tcpreplay Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.
CVE-2023-27784 1Broadcom 1Tcpreplay Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.
CVE-2023-27783 1Broadcom 1Tcpreplay Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c.
CVE-2023-23951 1Broadcom 2Symantec Identity Governance And Administration Symantec Identity Manager Jun 17, 2026 Jan 26, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application
CVE-2023-23950 1Broadcom 2Symantec Identity Governance And Administration Symantec Identity Manager Jun 17, 2026 Jan 26, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.
CVE-2023-23949 1Broadcom 2Symantec Identity Governance And Administration Symantec Identity Manager Jun 17, 2026 Jan 26, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
CVE-2022-25631 1Broadcom 1Symantec Endpoint Protection Jun 17, 2026 Jan 20, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software applicat...Show more Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevatedShow less
CVE-2022-25628 1Broadcom 1Symantec Identity Governance And Administration Jun 17, 2026 Dec 16, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4
CVE-2022-25627 1Broadcom 1Symantec Identity Governance And Administration Jun 17, 2026 Dec 16, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4
CVE-2022-25626 1Broadcom 1Symantec Identity Governance And Administration Jun 17, 2026 Dec 16, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.
CVE-2022-33187 1Broadcom 1Brocade Sannav Jun 17, 2026 Dec 9, 2022 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to read sensitive information.
CVE-2022-33186 2Broadcom Brocade 2Fabric Operating System Fabric Operating System Jun 17, 2026 Dec 8, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying z...Show more A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.Show less
CVE-2022-37017 1Broadcom 1Symantec Endpoint Protection Jun 17, 2026 Dec 1, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circu...Show more Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.Show less
CVE-2022-37016 1Broadcom 1Symantec Endpoint Protection Jun 17, 2026 Dec 1, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated ac...Show more Symantec Endpoint Protection (Windows) agent may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.Show less
CVE-2022-33185 1Broadcom 1Fabric Operating System Jun 17, 2026 Oct 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-base...Show more Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account.Show less
CVE-2022-33184 1Broadcom 1Fabric Operating System Jun 17, 2026 Oct 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated attackers to exploit stack-based buffer ov...Show more A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated attackers to exploit stack-based buffer overflows and execute arbitrary code as the root user account.Show less
CVE-2022-33183 1Broadcom 1Fabric Operating System Jun 17, 2026 Oct 25, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “d...Show more A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands.Show less
CVE-2022-33182 1Broadcom 1Fabric Operating System Jun 17, 2026 Oct 25, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “su...Show more A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “supportlink”, “firmwaredownload”, “portcfgupload, license, and “fosexec”.Show less
CVE-2022-33181 1Broadcom 1Fabric Operating System Jun 17, 2026 Oct 25, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to read sensitive files using switch command...Show more An information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a local authenticated attacker to read sensitive files using switch commands “configshow” and “supportlink”.Show less
CVE-2022-33180 1Broadcom 1Fabric Operating System Jun 17, 2026 Oct 25, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local authenticated attacker to export out sensitive files with “seccryptocfg”, “configupload”.

Previous 1...91011...33 Next