Read the docs

Broadcom

Records874All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records
Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

10 records in Dx Netops Spectrum · all components

TI-2025-42722 CVE-2025-69273 · GHSA-629r-327x-g7gq

Spectrum broken authentication

Priority MEDIUM 40

Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00347 Published 2026-01-12 Fixed in 24.3.11 and later CWE-287
TI-2025-42716 CVE-2025-69267 · GHSA-xwxw-pwqh-w83w

Spectrum directory path traversal

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps Spectrum: 24.3.8 and earlier.

CVSS 4.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00341 Published 2026-01-12 Fixed in 24.3.9 and later CWE-22
TI-2025-42718 CVE-2025-69269 · GHSA-7v62-cqvq-27h8

Spectrum command injection in NCM service

Priority LOW 33

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum:…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00886 Published 2026-01-12 Fixed in 23.3.7 and later CWE-78
TI-2025-42724 CVE-2025-69275 · GHSA-xhhf-m2qq-5jqc

Spectrum outdated java library in class-path

Priority LOW 30

Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS.This issue affects DX NetOps Spectrum: 24.3.9 and earlier.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00146 Published 2026-01-12 Fixed in 24.3.10 and later CWE-1395
TI-2025-42721 CVE-2025-69272 · GHSA-w979-vp3h-7hh9

Spectrum password returned in clear

Priority LOW 23

Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00169 Published 2026-01-12 Fixed in 21.2.2 and later CWE-319
TI-2025-42717 CVE-2025-69268 · GHSA-6ggp-xr3v-7c8x

Spectrum reflected XSS

Priority LOW 23

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00167 Published 2026-01-12 Fixed in 24.3.9 and later CWE-79
TI-2025-42725 CVE-2025-69276 · GHSA-6r88-6433-9q7w

Spectrum insecure deserialiation

Priority LOW 12

Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00306 Published 2026-01-12 Fixed in 25.4.1 and later CWE-502
TI-2025-42723 CVE-2025-69274 · GHSA-h37x-rm9w-8gpx

Spectrum broken authorization scheme

Priority LOW 12

Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00278 Published 2026-01-12 Fixed in 24.3.11 and later CWE-639
TI-2025-42720 CVE-2025-69271 · GHSA-pm3g-p264-jq6h

Spectrum basic authentication in use

Priority LOW 12

Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00241 Published 2026-01-12 Fixed in 25.4.1 and later CWE-522
TI-2025-42719 CVE-2025-69270 · GHSA-cpmj-jrpc-57wc

Spectrum session token in URL

Priority LOW 12

Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00327 Published 2026-01-12 Fixed in 24.3.9 and later CWE-598
Open these records in search →