Broadcom

Records874All Threatist records

Exploited (KEV)10In CISA KEV

CVSS critical152CVSS 9.0–10.0

CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV

TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability HIGH 71KEV 2026-10-28 TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL 100KEV 2026-08-18 TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability CRITICAL 94KEV 2026-03-03 TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 100KEV 2026-01-23 TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CRITICAL 93KEV 2025-10-30 TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records

Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

22 records in Raid Controller Web Interface · all components

TI-2023-04014 CVE-2023-4344 · GHSA-8vq8-vjqp-8v4r

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000 CWE-331

TI-2023-04012 CVE-2023-4342 · GHSA-4hpj-264p-mqf7

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04011 CVE-2023-4341 · GHSA-fv55-v3vq-qvw6

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

MEDIUM 50

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04010 CVE-2023-4340 · GHSA-4m8r-pf67-xg76

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

MEDIUM 50

Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04008 CVE-2023-4338 · GHSA-x936-55h9-qmp3

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04007 CVE-2023-4337 · GHSA-fm9p-gmcq-g63c

Broadcom RAID Controller web interface is vulnerable to improper session handling of…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04006 CVE-2023-4336 · GHSA-wjpw-jch2-7286

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04000 CVE-2023-4329 · GHSA-mmq9-xhf4-7wp2

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-03996 CVE-2023-4325 · GHSA-384q-8qmm-f548

Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-03995 CVE-2023-4324 · GHSA-9vvq-6f6m-39qv

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking…

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-03994 CVE-2023-4323 · GHSA-xjxq-vf9p-rf53

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

MEDIUM 50

Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04013 CVE-2023-4343 · GHSA-f4gp-x3qg-m22h

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive…

MEDIUM 40

Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00575 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04009 CVE-2023-4339 · GHSA-ghvj-7v2c-3p57

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for…

MEDIUM 40

Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00825 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04005 CVE-2023-4335 · GHSA-74hw-mjgm-cvv4

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

MEDIUM 40

Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00589 Published 2023-08-15 Fixed in 7.017.011.000 CWE-306

TI-2023-04004 CVE-2023-4334 · GHSA-c8m5-4w7x-78fr

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

MEDIUM 40

Broadcom RAID Controller Web server (nginx) is serving private files without any authentication

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00605 Published 2023-08-15 Fixed in 7.017.011.000 CWE-306

TI-2023-04002 CVE-2023-4332 · GHSA-9vhw-pjq3-v88g

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

MEDIUM 40

Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00592 Published 2023-08-15 Fixed in 7.017.011.000 CWE-732

TI-2023-04001 CVE-2023-4331 · GHSA-h82f-38xj-477x

Broken or risky cryptographic algorithm in Broadcom LSI Storage Authority

LOW 39

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2023-08-15 Fixed in 7.017.011.000 CWE-327

TI-2023-03997 CVE-2023-4326 · GHSA-w8q9-55rm-6r8q

Broken or risky cryptographic algorithm in Broadcom LSI Storage Authority

LOW 39

Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00399 Published 2023-08-15 Fixed in 7.017.011.000 CWE-327

TI-2023-04015 CVE-2023-4345 · GHSA-wfv7-gj87-q7qv

Broadcom RAID Controller web interface is vulnerable client-side control bypass

LOW 30

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00577 Published 2023-08-15 Fixed in 7.017.011.000

TI-2023-04003 CVE-2023-4333 · GHSA-m89f-h769-x259

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

LOW 24

Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00124 Published 2023-08-15 Fixed in 7.017.011.000 CWE-326

TI-2023-03999 CVE-2023-4328 · GHSA-c2mc-q4gg-xgm7

Insufficiently protected credentials in Broadcom LSI Storage Authority

LOW 24

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0011 Published 2023-08-15 Fixed in 7.017.011.000 CWE-522

TI-2023-03998 CVE-2023-4327 · GHSA-q8p7-cg4r-8f76

Insufficiently protected credentials in Broadcom LSI Storage Authority

LOW 24

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0011 Published 2023-08-15 No fix listed CWE-522

Open these records in search →