Read the docs

Broadcom

Records874All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records
Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

16 records in Advanced Secure Gateway · all components

TI-2023-09749 CVE-2023-23952 · GHSA-gjqm-p585-r974

Command injection in Advanced Secure Gateway, Content Analysis

Priority MEDIUM 51

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01301 Published 2023-06-01 No fix listed CWE-77
TI-2016-08332 CVE-2016-10258 · GHSA-8586-qhh3-x99v

Unrestricted file upload in Symantec Advanced Secure Gateway

Priority LOW 38

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles.

CVSS 3.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.04844 Published 2018-04-11 Fixed in 6.6.5.14, 6.7.3.1 +1 CWE-434
TI-2016-07446 CVE-2016-9097 · GHSA-qjw8-fqfp-g4fh

Access control flaw in Symantec Advanced Secure Gateway and ProxySG

Priority LOW 36

The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correct…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02353 Published 2017-05-11 No fix listed CWE-264
TI-2016-07448 CVE-2016-9100 · GHSA-wp7p-m228-g97j

Credentials management flaw in Symantec ASG

Priority LOW 34

Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information dis…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00429 Published 2017-05-11 Fixed in 6.6.5.13, 6.7.3.1 +1 CWE-255
TI-2016-07447 CVE-2016-9099 · GHSA-r27c-c98m-6x4q

Open redirect in Symantec ASG

Priority LOW 31

Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01826 Published 2017-05-11 Fixed in 6.7.2.1, 6.5.10.6 CWE-601
TI-2016-08331 CVE-2016-10257 · GHSA-vfc6-mrqm-f3vr

Cross-site scripting in Symantec ASG

Priority LOW 30

The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerabil…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01473 Published 2018-01-10 Fixed in 6.7.2.1, 6.5.10.6 CWE-79
TI-2018-12988 CVE-2018-18370 · GHSA-m2px-9cv3-x8qj

Cross-site scripting in Symantec Advanced Secure Gateway

Priority LOW 29

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00772 Published 2019-08-29 Fixed in 6.5.10.15, 6.7.4.2 CWE-79
TI-2023-09751 CVE-2023-23954 · GHSA-665m-vqmm-gg4v

Cross-site scripting in Advanced Secure Gateway, Content Analysis

Priority LOW 24

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00341 Published 2023-06-01 No fix listed CWE-79
TI-2017-09956 CVE-2017-13678 · GHSA-ph7c-5vcg-x887

Cross-site scripting in Symantec Advanced Secure Gateway

Priority LOW 24

Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01037 Published 2018-04-11 Fixed in 6.6.5.14, 6.7.4.107 +1 CWE-79
Open these records in search →