Broadcom vulnerabilities
95 CVEs and advisories name Broadcom as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-10847DX UIM Probe Improper ACL Handling RCE
- CVE-2025-9059Elevation of Privileges Vulnerability in IT Management Suite
- CVE-2025-8661Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1
- CVE-2025-8660Privilege Escalation in Symantec PGP Encryption 11.0.1
- CVE-2025-7397CLI history displays inline passwords
- CVE-2025-6391JSON Web Token (JWT) Exposure in Log Files
- CVE-2025-7398Medium Strength Cipher Suites detected on port on ports 9000 and 8036
- CVE-2025-6392Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)
- CVE-2025-6390Cleartext storage of sensitive information in Brocade SANnav server audit logs.
- CVE-2025-4662Plaintext security passwords are logged in the audit logs while executing openssl cmd
- CVE-2025-4663Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerability
- CVE-2025-24508Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite
- CVE-2025-5333Unauthenticated Remote Code Execution in IT Management Suite
- CVE-2025-24919Dell ControlVault3/ControlVault3 Plus deserialization of untrusted input vulnerability
- CVE-2025-25215Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability
- CVE-2025-25050Dell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write vulnerability
- CVE-2025-24922Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability
- CVE-2025-24311Dell ControlVault3/ControlVault3 Plus cv_send_blockdata out-of-bounds read vulnerability
- CVE-2025-4971Broadcom Automic Automation Agent Unix privilege escalation
- CVE-2025-24507This vulnerability allows appliance compromise at boot time.
- CVE-2025-24506A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.
- CVE-2025-24505This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploadi
- CVE-2025-24504An improper input validation the CSRF filter results in unsanitized user input written to the application logs.
- CVE-2025-24503A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.
- CVE-2025-24502An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an
- CVE-2025-24501An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.
- CVE-2025-24500The vulnerability allows an unauthenticated attacker to access information in PAM database.
- CVE-2024-38499Improper Privilege Management Vulnerability in CA Client Automation 14.5
- CVE-2024-38496Symantec Privileged Access Manager Insecure Direct Object Reference vulnerability
- CVE-2024-38495Symantec Privileged Access Manager User Enumeration vulnerability