Read the docs

Broadcom

Records874All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records
Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

874 records

TI-2026-42442 CVE-2026-59310 · GHSA-v2gp-49gj-2c9f

vCenter directory-traversal vulnerability

Priority CRITICAL 100KEV

VMware vCenter contains a directory traversal vulnerability in the Syslog server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.61668 Published 2026-07-30 Fixed in 9.1.0.0300, 9.0.2.0100 +1 CWE-22
TI-2024-24610 CVE-2024-37079 · GHSA-qqfg-j9g4-4mfh

Out-of-bounds write in VMware vCenter Server

Priority CRITICAL 100KEV

vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22377 Published 2024-06-18 Fixed in 8.0 U2d, 8.0 U1e +1 CWE-787
TI-2018-01178 CVE-2018-1273 · GHSA-4fq3-mr56-cg6r

Code injection in Spring Framework

Priority CRITICAL 100KEV

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96956 Published 2018-04-11 Partial fix · 1.13.11, 2.0.6 CWE-94
TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

mod_proxy SSRF

Priority CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918
TI-2025-01721 CVE-2025-1976 · GHSA-73hp-3m9v-h54h

Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

Priority CRITICAL 96KEV

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1…

CVSS 4.0HIGH 8.6 Adjacent network Low privileges No interaction EPSS 0.0069 Published 2025-04-24 No fix listed CWE-94
TI-2022-01915 CVE-2022-2068 · GHSA-xjxr-x4h8-946x

The c_rehash script allows command injection

Priority CRITICAL 93

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96391 Published 2022-06-21 Partial fix CWE-78
TI-2022-07428 CVE-2022-23305 · GHSA-65fg-84f6-3jq3

SQL injection in JDBC Appender in Apache Log4j V1

Priority CRITICAL 85

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.66537 Published 2022-01-18 Partial fix · 2.0-alpha1 CWE-89
TI-2011-01439 CVE-2011-1653 · GHSA-fw8j-3h2g-fxpw

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA…

Priority CRITICAL 85

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFu…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.88655 Published 2011-04-15 No fix listed CWE-89
TI-2020-06482 CVE-2020-8012 · GHSA-cvw3-9vqh-r4q9

Buffer overflow in Broadcom CA Unified Infrastructure Management

Priority HIGH 81

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.77415 Published 2020-02-18 No fix listed CWE-120
TI-2007-04894 CVE-2007-5082 · GHSA-642r-w5cm-5w9c

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical…

Priority HIGH 78

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.6346 Published 2007-10-01 No fix listed CWE-119
TI-2007-03112 CVE-2007-3216 · GHSA-qjf7-69w3-45mh

Multiple buffer overflows in the LGServer component of CA (Computer Associates)…

Priority HIGH 77

Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1)…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.59193 Published 2007-06-14 No fix listed CWE-119
Load more
Open these records in search →