CVE-2011-1654

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll...

7.5 High

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.

Exploit likelihood

11.4%Down 16.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2011-1654
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-1654
Updated: 2026-11-02

EUVDEUVD-2011-1654 No score

Record: EUVD-2011-1654
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8xvg-wm2x-mw68 No score

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll...

Record: GHSA-8xvg-wm2x-mw68
Weakness: CWE-22
Updated: 2026-11-02

Affected products

broadcom total defense

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1654 is a high vulnerability (CVSS 7.5) in Broadcom Total Defense, published April 15, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. No source names a fixed version.

References

Show 6 moreShow less