Vendor
Broadcom
866 known vulnerabilities in products by Broadcom, 5 of them actively exploited (CISA KEV).
Key figures
866
Vulnerabilities
5
Actively exploited (KEV)
2
Used by ransomware
102
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-1273 | VMware Tanzu Spring Data Commons Property Binder Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomware | 9.0 | |
| Critical | CVE-2021-22555 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE In CISA KEV | 8.3 | |
| Critical | CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2025-1976 | Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 In CISA KEV | 6.7 | |
| High | CVE-2025-1094 | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation | 8.1 | |
| High | CVE-2026-94579 | Brocade Fabric OS: OS Command Injection | 8.0 | |
| High | CVE-2026-87666 | Brocade Fabric OS: OS Command Injection | 8.0 | |
| Critical | CVE-2020-8012 | CA Unified Infrastructure Management (Nimsoft/UIM): Buffer Overflow | 9.8 | |
| Critical | CVE-2022-23305 | SQL injection in JDBC Appender in Apache Log4j V1 | 9.8 | |
| Critical | CVE-2017-9417 | Broadcom BCM43XX Wi-Fi Chipset Firmware: Code Execution | 9.8 | |
| Critical | CVE-2020-8010 | CA Unified Infrastructure Management (Nimsoft/UIM): security vulnerability | 9.8 | |
| Critical | CVE-2024-3596 | IETF RFC: security vulnerability | 9.0 | |
| Critical | CVE-2015-4664 | CA Privileged Access Manager: Improper Input Validation | 9.8 | |
| High | CVE-2026-87680 | Brocade Fabric OS: OS Command Injection | 8.8 | |
| High | CVE-2026-57219 | Rabbitmq-server: Exposure of Sensitive Information to an Unauthorized Actor | 7.5 | |
| Critical | CVE-2018-15691 | CA Technologies Release Automation: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-9022 | CA Privileged Access Manager: Authentication Bypass | 9.8 | |
| High | CVE-2022-23302 | Deserialization of untrusted data in JMSSink in Apache Log4j 1.x | 8.8 | |
| Critical | CVE-2018-9021 | CA Privileged Access Manager: Authentication Bypass | 9.8 | |
| Critical | CVE-2017-11120 | Apple iPhone OS: Buffer Overflow | 9.8 | |
| High | CVE-2026-87682 | Brocade Fabric OS: OS Command Injection | 8.8 | |
| Critical | CVE-2016-8204 | Broadcom Brocade Network Advisor: Path Traversal | 9.8 | |
| Critical | CVE-2019-13656 | CA Technologies Client Automation: Improper Access Control | 9.8 | |
| Critical | CVE-2022-2068 | The c_rehash script allows command injection | 7.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,
- RabbitMQ flaws expose OAuth secrets, risk complete takeover of the brokercsoonline,
- Hitachi Energy AFS, AFR and AFF Seriescisa-advisories,
- SSA-712518 (Last Update: 2020-08-11): Information Disclosure Vulnerability (Kr00k) in Industrial Wi-Fi Productssiemens-productcert
- SSA-146325 V1.0: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16siemens-productcert
- SSA-723487 V1.0: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Productssiemens-productcert