Skip to contentBroadcom vulnerabilities
Products
Show 75 moreShow less
Newest
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper...CVE-2025-222437.5 High
- broadcom tcpreplaytcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.CVE-2024-22654Fix available7.5 High
- broadcom automic automationBroadcom Automic Automation Agent Unix privilege escalationCVE-2025-4971Public exploit8.5 High
- broadcom bitnami, bitnami\/pgpool +1 more[pgpool] Unauthenticated access to postgres through pgpoolCVE-2025-22248Fix available9.4 Critical
- symantec endpoint protection, broadcom symantec eraser engine +1 moreSymantec Endpoint Protection Elevation of PrivilegeCVE-2025-35996.5 Medium
- broadcom brocade fabric os, brocade fabric os, broadcom fabric operating system +2 moreCode injection exposure in Fabric OS 9.1.0 through 9.1.1d6CVE-2025-1976In KEV8.6 High
- brocade ascg, broadcom brocade active support connectivity gateway +1 moreBrocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100CVE-2024-15097.6 High
- broadcom fabric operating system, brocade fabric os +1 moreCommand or parameter injection via unique embedded switch SNMP commands.CVE-2024-54618.6 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS may capture SNMP Passwords in clear textCVE-2024-54625.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav OVA SSH port 22CVE-2024-42828.2 High
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav port 443 & 18082CVE-2024-104056.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreDocker implementation in Brocade SANnav is missing Audit Rules.CVE-2024-22408.6 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav encryption key is logged in the debug logsCVE-2025-10538.6 High
- broadcom brocade sannav, brocade sannav +1 moreClear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsaveCVE-2024-104045.5 Medium
- broadcom symantec privileged access managementThis vulnerability allows appliance compromise at boot time.CVE-2025-245078.9 High
- broadcom symantec privileged access managementA specific authentication strategy allows to learn ids of PAM users associated with certain...CVE-2025-245065.3 Medium
- broadcom symantec privileged access managementThis vulnerability allows a high-privileged authenticated PAM user to achieve remote command...CVE-2025-245058.8 High
- broadcom symantec privileged access managementAn improper input validation the CSRF filter results in unsanitized user input written to the...CVE-2025-245045.3 Medium
- broadcom symantec privileged access managementA malicious actor can fix the session of a PAM user by tricking the user to click on a specially...CVE-2025-245039.3 Critical
- broadcom symantec privileged access managementAn improper session validation allows an unauthenticated attacker to cause certain request...CVE-2025-245025.3 Medium
- broadcom symantec privileged access managementAn improper input validation allows an unauthenticated attacker to alter PAM logs by sending a...CVE-2025-245015.3 Medium
- broadcom symantec privileged access managementThe vulnerability allows an unauthenticated attacker to access information in PAM database.CVE-2025-245008.7 High
- broadcom ca client automation (itcm)Improper Privilege Management Vulnerability in CA Client Automation 14.5CVE-2024-384997.3 High
- brocade fabric os, broadcom fabric operating system +1 morePrivileged escalation via crafted use of portcfg commandCVE-2024-75178.5 High
- brocade fabric os, broadcom fabric operating system +1 moreSFTP/FTP password could be captured in plain text in Supportsave generated from SANnavCVE-2024-104035.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav Information Disclosure VulnerabilityCVE-2022-439375.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch passwords when debugging is enabledCVE-2022-439366.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreSwitch passwords and authorization IDs are printed in the embedded MLS DB fileCVE-2022-439355.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak Key-exchange algorithmsCVE-2022-439346.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreconfiguration secrets are logged in support-saveCVE-2022-439334.4 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS before 9.2.2 does not enforce strict host key checkingCVE-2024-75167.0 High
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 morePrivilege escalation vulnerabilityCVE-2024-38813In KEVEPSS 17.4%7.5 High
- vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 moreHeap-overflow vulnerabilityCVE-2024-38812In KEVEPSS 54.6%9.8 Critical
- broadcom symantec privileged access managementSymantec Privileged Access Manager Insecure Direct Object Reference vulnerabilityCVE-2024-384965.1 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager User Enumeration vulnerabilityCVE-2024-384955.3 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerabilityCVE-2024-384948.6 High
- broadcom symantec privileged access managementSymantec Privileged Access Manager Reflected Cross Site Scripting vulnerabilityCVE-2024-384936.8 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerabilityCVE-2024-384929.4 Critical
- broadcom symantec privileged access managementSymantec Privileged Access Manager SQL Injection vulnerabilityCVE-2024-384918.4 High
- broadcom symantec privileged access managementSymantec Privileged Access Manager Privilege Escalation vulnerabilityCVE-2024-364585.1 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Authentication Bypass vulnerabilityCVE-2024-364575.3 Medium
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerabilityCVE-2024-364569.4 Critical
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerabilityCVE-2024-364559.4 Critical
- ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 moreRADIUS Protocol under RFC2865 is vulnerable to forgery attacks.CVE-2024-3596Public exploitFix availableEPSS 14.9%9.0 Critical
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions prior to v9.0 have default community stringsCVE-2024-54608.1 High
- brocade fabric os, broadcom fabric operating system +1 morepassword management API prints sensitive information in log filesCVE-2024-299545.9 Medium
- brocade fabric os, broadcom fabric operating system +1 moreEncoded session passwords on session storage for Virtual Fabric platformsCVE-2024-299534.3 Medium
- vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...CVE-2024-37079In KEVEPSS 22.4%9.8 Critical
- broadcom symantec siteminderCross-Site Scripting Vulnerability in Symantec SiteMinder Web AgentCVE-2024-364598.4 High
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 moreThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious...CVE-2024-22274Public exploit7.2 High
- Show moreLoading…