← Back

Broadcom

broadcom

645 CVEs • 275 products

Products (275)

Click to collapse
Toggle
Tcpreplay
tcpreplay
Sannav
sannav
Inoculateit
inoculateit
Etrust Admin
etrust_admin
Unicenter Tng
unicenter_tng
Total Defense
total_defense
Adviseit
adviseit
Anti Virus
anti-virus
Siteminder
siteminder
Ehealth
ehealth
Vmware Nsx
vmware_nsx
Messaging
messaging
Anti Spyware
anti-spyware
Spectrum
spectrum

CVEs (645)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Broadcom
1Ca Automic Automation
Jun 17, 2026
Jun 16, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code.
1Broadcom
1Ca Automic Automation
Jun 17, 2026
Jun 16, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially access sensitive data.
1Broadcom
1Ca Automic Automation
Jun 17, 2026
Jun 16, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands.
1Broadcom
1Ca Clarity
Jun 17, 2026
Jun 16, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system.
1Broadcom
1Sannav
Jun 17, 2026
May 9, 2022
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.
1Broadcom
1Sannav
Jun 17, 2026
May 6, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perfor...Show more
A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because restrictions are not performed on Server side to ensure the user has required permission before processing requests.Show less
1Broadcom
1Sannav
Jun 17, 2026
May 6, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords.
1Broadcom
1Sannav
Jun 17, 2026
May 6, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
May 4, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality.
1Broadcom
1Tcpreplay
Jun 17, 2026
Apr 12, 2022
N/A· v4
7.8 HIGH· v3
5.1 MEDIUM· v2
Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.
1Broadcom
1Tcpreplay
Jun 17, 2026
Apr 12, 2022
N/A· v4
7.8 HIGH· v3
5.1 MEDIUM· v2
Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
1Broadcom
1Symantec Siteminder
Nov 20, 2024
Mar 28, 2022
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argu...Show more
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
2Broadcom
Fedoraproject
2Fedora
Tcpreplay
Jun 17, 2026
Mar 26, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.
5Broadcom
DebianLinux+2 more
9Brocade Fabric Operating System Firmware
Communications Cloud Native Core Binding Support FunctionDebian Linux+6 more
Jun 17, 2026
Mar 23, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have...Show more
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.Show less
1Broadcom
1Tcpreplay
Jun 17, 2026
Mar 22, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1.
1Broadcom
1Fabric Operating System
Jun 17, 2026
Mar 18, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has comp...Show more
The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials.Show less
1Broadcom
1Fabric Operating System
Jun 17, 2026
Mar 18, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability in the Brocade Fabric OS before Brocade Fabric OS v9.0.1a, v8.2.3, v8.2.0_CBN4, and v7.4.2h could allow an authenticated CLI user to abuse the history command to write arbitrary content to files.