Read the docs

Broadcom

Records874All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records
Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

10 records in Privileged Access Manager · all components

TI-2015-03903 CVE-2015-4664 · GHSA-658r-rq3p-fwrx

Improper input validation in CA Privileged Access Manager

Priority MEDIUM 61

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20195 Published 2018-06-18 No fix listed CWE-20
TI-2018-06542 CVE-2018-9022 · GHSA-qq9f-gg6w-vgfx

Improper privilege management in CA Privileged Access Manager

Priority MEDIUM 56

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12555 Published 2018-06-18 No fix listed CWE-269
TI-2018-06541 CVE-2018-9021 · GHSA-4p35-q5ww-g8qx

Improper privilege management in CA Privileged Access Manager

Priority MEDIUM 54

An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0942 Published 2018-06-18 No fix listed CWE-269
TI-2018-06549 CVE-2018-9029 · GHSA-9539-wc47-wc8c

SQL injection in CA Privileged Access Manager

Priority MEDIUM 45

An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01668 Published 2018-06-18 No fix listed CWE-89
TI-2018-06543 CVE-2018-9023 · GHSA-w9v7-2mp6-x5vq

Improper input validation in CA Privileged Access Manager

Priority MEDIUM 42

An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01817 Published 2018-06-18 No fix listed CWE-20
TI-2018-06545 CVE-2018-9025 · GHSA-q6h9-8v42-99g3

Improper input validation in CA Privileged Access Manager

Priority LOW 36

An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0134 Published 2018-06-18 No fix listed CWE-20
TI-2018-06546 CVE-2018-9026 · GHSA-hm5m-25h3-h3x2

Session fixation in CA Privileged Access Manager

Priority LOW 35

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0127 Published 2018-06-18 No fix listed CWE-384
TI-2018-06544 CVE-2018-9024 · GHSA-xjrw-4vxx-f2vq

Improper authentication in CA Privileged Access Manager

Priority LOW 26

An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01084 Published 2018-06-18 No fix listed CWE-287
Open these records in search →