Skip to content
OpenAdvisories

Vendor

Broadcom

95 known vulnerabilities.

Products

LSI Storage Authority (LSA) 22 Symantec Privileged Access Management 18 BCM5820X 13 DX NetOps Spectrum 10 Symantec IT Management Suite 3 Brocade ASCG 3 Brocade SANnav 3 Symantec Endpoint Protection Windows Client 2 WiFi drivers 2 Symantec PGP Encryption 2 Automic Automation 2 brcmfmac WiFi driver 2 Symantec Web Security Services Agent 1 Data Loss Prevention 1 Layer 7 API Gateway 1 Unified Infrastructure Management 1 Symantec Management Suite 1 Brocade Fabric OS 1 SiteMinder 1 8.6.IT Management Suite 1 Symantec SiteMinder 1 Symantec Ghost Solution Suite 1 Symantec Endpoint Protection CleanWipe Removal Tool 1 CA Client Automation (ITCM) 1 Symantec Endpoint Detection and Response 1 Automic Workload Automation 0 Automic Automation Agent 0 Brocade Switch 0 Brocade SANnav < 2.2.0.2 0 Brocade SANnav < 2.2.1 0 Fabric OS 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.5
    CVE-2025-5333

    Unauthenticated Remote Code Execution in IT Management Suite

    Remote attackers can execute arbitrary code in the context of the vulnerable service process.

    Broadcom Symantec IT Management Suite
  • Critical 9.3
    CVE-2025-24503

    A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PA…

    Broadcom Symantec Privileged Access Management
  • Critical 9.4
    CVE-2024-38492

    Symantec Privileged Access Manager Remote Command Execution vulnerability

    This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.

    Broadcom Symantec Privileged Access Management
  • Critical 9.4
    CVE-2024-36456

    Symantec Privileged Access Manager Remote Command Execution vulnerability

    This vulnerability allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by uploading a specially crafted PAM upgrade file.

    Broadcom Symantec Privileged Access Management
  • Critical 9.4
    CVE-2024-36455

    Symantec Privileged Access Manager Remote Command Execution vulnerability

    An improper input validation allows an unauthenticated attacker to achieve remote command execution on the affected PAM system by sending a specially crafted HTTP request.

    Broadcom Symantec Privileged Access Management
  • Critical 9.8
    CVE-2023-4344

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)