Vulnerabilities (CVE)

Filtered by vendor Broadcom Subscribe
Total 563 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-10256 1 Broadcom 1 Symantec Proxysg 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application. This is a separate vulnerability from CVE-2016-10257.
CVE-2015-4664 2 Broadcom, Xceedium 2 Privileged Access Manager, Xsuite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.
CVE-2005-10001 1 Broadcom 1 Symantec Siteminder 2024-11-20 5.8 MEDIUM 5.4 MEDIUM
A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer