Skip to contentBroadcom vulnerabilities
Products
Show 75 moreShow less
Newest
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsCVE-2026-57219Fix available8.7 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosureCVE-2026-57218Fix available4.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksCVE-2026-57216Fix available6.8 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSCVE-2026-57220Fix available7.5 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS in RabbitMQ management UICVE-2026-57214Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: UNC SSRF affecting the management UI on WindowsCVE-2026-57211Fix available6.5 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_sizeCVE-2026-57212Fix available7.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingCVE-2026-57213Fix available5.7 Medium
- broadcom spring statemachine, spring statemachine +1 moreSpring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlistCVE-2026-41862Fix available8.8 High
- broadcom spring cloud sleuth, spring cloud sleuth +1 moreSpring Cloud Sleuth instrumentation of Spring TX DoS vulnerabilityCVE-2026-417087.5 High
- broadcom spring web services, spring web services +1 moreWSS4J validation does not use configured replay cacheCVE-2026-41000Fix available3.7 Low
- broadcom spring web services, spring web services +1 moreSpring WS SSRF via unvalidated WS-Addressing reply destinationsCVE-2026-40999Fix available8.6 High
- broadcom spring web services, spring web services +1 moreJaxp13 XPath XXE via StreamSource and SAXSourceCVE-2026-40998Fix available8.2 High
- broadcom spring web services, spring web services +1 moreSOAP security faults leak Spring Security account stateCVE-2026-40997Fix available5.3 Medium
- broadcom spring web services, spring web services +1 moreInbound WS-Security allows RSA PKCS#1 v1.5 key transport by defaultCVE-2026-40996Fix available4.8 Medium
- broadcom spring web services, spring web services +1 moreX.509 authentication bypasses Spring Security account checksCVE-2026-40995Fix available5.4 Medium
- broadcom spring web services, spring web services +1 moreWss4jSecurityInterceptor disables WS-I BSP validation by defaultCVE-2026-40994Fix available8.2 High
- broadcom spring web flow, spring web flow +1 moreSpring Web Flow JS RemotingHandler renders non-HTML Response as HTMLCVE-2026-40986Fix available4.8 Medium
- broadcom spring web flow, spring web flow +1 moreData Binding Vulnerability in Spring Web Flow with Unified EL ParserCVE-2026-40985Fix available6.4 Medium
- broadcom symantec endpoint protection cleanwipe removal toolLocal Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal ToolCVE-2026-116265.4 Medium
- broadcom layer 7 api gatewayInsecure Deserialization via MITM in Layer 7 Policy ManagerCVE-2026-118155.3 Medium
- broadcom spring data commons, spring data commons +1 moreSpring Data Commons Denial of Service via Data BindingCVE-2026-41721Fix available5.9 Medium
- broadcom spring data keyvalue, spring data redis, spring data keyvalue +1 more +3 moreSpring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparatorCVE-2026-41719Fix available6.4 Medium
- broadcom spring data commons, spring data commons +1 moreSpring Data web support unbounded negative-result cache keyed on attacker-supplied property namesCVE-2026-41716Fix available7.5 High
- broadcom spring data commons, spring data commons +1 morePotential Denial of Service through crafted Sort ParametersCVE-2026-41711Fix available5.9 Medium
- broadcom spring data relational, spring data relational, data jdbc +1 more +3 moreSpring Data Relational Parameter not Escaped for Query By Example LIKE PatternCVE-2026-41697Fix available4.8 Medium
- broadcom spring data commons, spring data commons +1 moreDenial of Service in Spring Data Commons Property Path ResolutionCVE-2026-41695Fix available7.5 High
- broadcom spring authorization server, spring authorization server, security +1 more +3 moreSpring Security Authorization Server Open Redirect via request_uriCVE-2026-41008Fix available6.1 Medium
- broadcom spring rest docs, spring rest docs +1 moreXML External Entity (XXE) injection when documenting untrusted XML contentCVE-2026-40991Fix available5.9 Medium
- broadcom spring retry, spring retry +1 moreCache Exhaustion in Stateful Retries leads to Denial of ServiceCVE-2026-41710Public exploitFix available5.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unsanitized vhost names allow for XSS in management UICVE-2026-44839Fix available5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ MQTT Topic Permission Authorization BypassCVE-2026-44838Fix available5.3 Medium
- broadcom automic automationAutomic Automation Agent Unix privilege escalationCVE-2026-83708.5 High
- broadcom data loss preventionElevation of Privileges in Symantec Data Loss Prevention Windows EndpointCVE-2026-39917.8 High
- broadcom siteminder, symantec siteminder +1 moreCross-Site Scripting Vulnerability in SiteMinder Administrative UICVE-2026-38624.6 Medium
- brocade ascg, broadcom brocade active support connectivity gateway +1 moreApplication User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0CVE-2026-08698.3 High
- broadcom vmware aria operations, vmware aria operations, cloud foundation +3 more +5 moreVMware Aria Operations command injection vulnerabilityCVE-2026-22719In KEVEPSS 18.3%8.1 High
- brocade fabric os, broadcom fabric operating system +1 moreDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commandsCVE-2025-583814.6 Medium
- brocade fabric os, broadcom fabric operating system +1 morePrivilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2bCVE-2025-97118.5 High
- brocade fabric os, broadcom fabric operating system +1 moreDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep commandCVE-2025-583804.6 Medium
- brocade fabric os, broadcom fabric operating system +1 moreInformation disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0CVE-2026-03838.2 High
- brocade fabric os, broadcom fabric operating system +1 morePassword Exposure in Brocade Fabric OSCVE-2025-583796.0 Medium
- brocade fabric os, broadcom fabric operating system +1 morePrivilege escalation via bind command in Brocade Fabric OSCVE-2025-583838.4 High
- brocade fabric os, broadcom fabric operating system +1 morePrivilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2aCVE-2025-583828.5 High
- broadcom sannavSQL queries with sensitive information printed in logs with Brocade SANnav before 3.0CVE-2025-127744.6 Medium
- broadcom sannavPlain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0aCVE-2025-127737.1 High
- broadcom sannavPlaintext Switch admin login password is seen in Brocade SANnav support saveCVE-2025-127728.5 High
- broadcom sannavPlain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0CVE-2025-126797.1 High
- broadcom sannavBrocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)CVE-2025-126806.0 Medium
- broadcom symantec endpoint protection windows clientComponent Object Model (COM) Hijacking in Symantec Endpoint Protection Windows ClientCVE-2025-139194.4 Medium
- Show moreLoading…