Read the docs

Broadcom

Records874All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records
Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

10 records in Ca Api Developer Portal · all components

TI-2020-09354 CVE-2020-11658 · GHSA-8mwq-82jg-rcwh

Authorization bypass in CA API Developer Portal

Priority MEDIUM 47

CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02375 Published 2020-04-15 No fix listed CWE-639
TI-2020-09361 CVE-2020-11665 · GHSA-99vh-qp5v-28g7

Open redirect in CA API Developer Portal

Priority LOW 30

CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01569 Published 2020-04-15 No fix listed CWE-601
TI-2020-09360 CVE-2020-11664 · GHSA-2pg2-438w-c6wh

Open redirect in CA API Developer Portal

Priority LOW 30

CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01353 Published 2020-04-15 No fix listed CWE-601
TI-2020-09359 CVE-2020-11663 · GHSA-qj7x-gxwx-cjwh

Open redirect in CA API Developer Portal

Priority LOW 30

CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01325 Published 2020-04-15 No fix listed CWE-601
TI-2018-04857 CVE-2018-6590 · GHSA-6rgv-3m65-6x4r

Cross-site scripting in CA API Developer Portal

Priority LOW 29

CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00747 Published 2018-08-03 No fix listed CWE-79
TI-2020-09355 CVE-2020-11659 · GHSA-w8xx-jh7q-6xj6

Authorization bypass in CA API Developer Portal

Priority LOW 22

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00924 Published 2020-04-15 No fix listed CWE-639
Open these records in search →