Broadcom
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| LSI Storage Authority (LSA) | 22 | – | Aug 15, 2023 |
| Symantec Privileged Access Management | 18 | – | Jan 30, 2025 |
| BCM5820X | 13 | – | Nov 17, 2025 |
| DX NetOps Spectrum | 10 | – | Jan 12, 2026 |
| Brocade ASCG | 3 | – | Jul 17, 2025 |
| Symantec IT Management Suite | 3 | – | Jul 17, 2026 |
| Brocade SANnav | 3 | – | Jul 10, 2025 |
| Automic Automation | 2 | – | May 19, 2026 |
| Symantec Endpoint Protection Windows Client | 2 | – | Jan 28, 2026 |
| Symantec PGP Encryption | 2 | – | Aug 11, 2025 |
| Symantec SiteMinder | 1 | – | Jun 14, 2024 |
| Symantec Web Security Services Agent | 1 | – | Jan 28, 2026 |
| 8.6.IT Management Suite | 1 | – | Sep 11, 2025 |
| Unified Infrastructure Management | 1 | – | Oct 1, 2025 |
| Brocade Fabric OS | 1 | – | Jul 8, 2025 |
| CA Client Automation (ITCM) | 1 | – | Dec 17, 2024 |
| Data Loss Prevention | 1 | – | Mar 30, 2026 |
| Layer 7 API Gateway | 1 | – | Jun 10, 2026 |
| SiteMinder | 1 | – | Mar 10, 2026 |
| Symantec Endpoint Detection and Response | 1 | – | Oct 13, 2026 |
| Symantec Endpoint Protection CleanWipe Removal Tool | 1 | – | Jun 10, 2026 |
| Symantec Ghost Solution Suite | 1 | – | Oct 27, 2026 |
| Symantec Management Suite | 1 | – | Jul 17, 2026 |
Exploited and recent CVEs
- CVE-2026-101034 Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials 0.1%
- CVE-2026-19810 Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console 0.2%
- CVE-2026-15380 Local privilege escalation in Symantec ITMS 0.2%
- CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS 0.1%
- CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool 0.1%
- CVE-2026-11815 Insecure Deserialization via MITM in Layer 7 Policy Manager 0.3%
- CVE-2026-8370 Automic Automation Agent Unix privilege escalation 0.1%
- CVE-2026-3991 Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint 0.2%
- CVE-2026-3862 Cross-Site Scripting Vulnerability in SiteMinder Administrative UI 0.2%
- CVE-2025-13919 Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client 0.1%
- CVE-2025-13918 Elevation of Privileges in Symantec Endpoint Protection Windows Client 0.2%
- CVE-2025-13917 Elevation of Privileges in Web Security Services (WSS) Agent <0.1%
- CVE-2025-69276 Spectrum insecure deserialiation 0.3%
- CVE-2025-69275 Spectrum outdated java library in class-path 0.1%
- CVE-2025-69274 Spectrum broken authorization scheme 0.3%
- CVE-2025-69273 Spectrum broken authentication 0.3%
- CVE-2025-69272 Spectrum password returned in clear 0.2%
- CVE-2025-69271 Spectrum basic authentication in use 0.2%
- CVE-2025-69270 Spectrum session token in URL 0.3%
- CVE-2025-69269 Spectrum command injection in NCM service 0.9%
- CVE-2025-69268 Spectrum reflected XSS 0.2%
- CVE-2025-69267 Spectrum directory path traversal 0.3%
- CVE-2025-31649 Dell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerability 0.2%
- CVE-2025-31361 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerability 0.2%
- CVE-2025-36463 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 0.2%
- CVE-2025-36462 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 0.1%
- CVE-2025-36461 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 0.1%
- CVE-2025-36460 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability 0.2%
- CVE-2025-32089 Dell ControlVault3 CvManager_SBI buffer overflow vulnerability 0.3%
- CVE-2025-36553 Dell ControlVault3 CvManager buffer overflow vulnerability 0.3%