Read the docs

Broadcom

Records874All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical152CVSS 9.0–10.0
CVSS high362CVSS 7.0–8.9

Exploited now

Broadcom records in CISA KEV
TI-2026-30225 Broadcom VMWare ESX Insufficient Logging Vulnerability Priority HIGH 71KEV 2026-10-28TI-2026-42442 Broadcom VMware vCenter Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-08-18TI-2026-18246 Broadcom VMware Aria Operations Command Injection Vulnerability Priority CRITICAL 94KEV 2026-03-03TI-2024-24610 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Priority CRITICAL 100KEV 2026-01-23TI-2025-27491 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Priority CRITICAL 93KEV 2025-10-30TI-2021-05514 Linux Kernel Heap Out-of-Bounds Write Vulnerability Priority CRITICAL 95KEV 2025-10-06

Components

Products in the NVD configurations · select one to filter the records
Fabric Operating System 146 records CRITICAL Rabbitmq Server 79 records HIGH Brocade Sannav 58 records CRITICAL Tcpreplay 50 records HIGH Brightstor Arcserve Backup 41 records HIGH Brocade Fabric Operating System Firmware 26 records CRITICAL Raid Controller Web Interface 22 records MEDIUM Sannav 20 records CRITICAL

Records

11 records in Symantec Critical System Protection · all components

TI-2019-13377 CVE-2019-18374 · GHSA-8j5m-96p7-j6g4

Improper authentication in Symantec Critical System Protection

Priority MEDIUM 45

Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent e…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2019-11-25 No fix listed CWE-287
TI-2014-02770 CVE-2014-3440 · GHSA-h4qp-ph3r-9hj4

The Agent Control Interface in the management server in Symantec Critical System…

Priority MEDIUM 45

The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenti…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03306 Published 2015-01-21 No fix listed CWE-20
TI-2015-07245 CVE-2015-8799 · GHSA-rjp4-gcx6-p65v

Directory traversal vulnerability in the Management Server in Symantec Embedded Security…

Priority MEDIUM 41

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devic…

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.05258 Published 2016-06-08 No fix listed CWE-22
TI-2015-06764 CVE-2015-8157 · GHSA-w8c7-26w6-xx7c

SQL injection vulnerability in the Management Server in Symantec Embedded Security…

Priority MEDIUM 41

SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SE…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01505 Published 2016-06-08 No fix listed CWE-89
TI-2015-07244 CVE-2015-8798 · GHSA-7m45-rxr2-jh3h

Directory traversal vulnerability in the Management Server in Symantec Embedded Security…

Priority LOW 39

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devic…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02411 Published 2016-06-08 No fix listed CWE-22
TI-2014-06072 CVE-2014-7289 · GHSA-4pp2-m693-v6x9

SQL injection vulnerability in the management server in Symantec Critical System…

Priority LOW 36

SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenti…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04554 Published 2015-01-21 No fix listed CWE-89
TI-2015-07246 CVE-2015-8800 · GHSA-jgv7-7943-grr9

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5…

Priority LOW 34

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCS…

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.01175 Published 2016-06-08 No fix listed CWE-74
TI-2014-07489 CVE-2014-9225 · GHSA-vm75-p2wg-q736

The ajaxswing webui in the management server in Symantec Critical System Protection…

Priority LOW 31

The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows remote authenticated…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0922 Published 2015-01-21 No fix listed CWE-200
TI-2014-07488 CVE-2014-9224 · GHSA-4jgr-5qw5-7m4m

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security:…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.04591 Published 2015-01-21 No fix listed CWE-79
Open these records in search →