CVE Program partner

ca

CA Technologies - A Broadcom Company

API
CVEs, 365 days1180 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationCA Technologies - A Broadcom Company
RoleCNA
TypeVendor
Reports tomitre
ScopeCA Technologies issues only. Note that Broadcom PSIRT handles all CA issues.
Advisorieshttps://support.broadcom.com/security-advisory/security-advisories-list.html?segment=ES

Latest CVEs · RSS

  • CVE-2026-8370 2026-05-19 · CVSS 8.5
    Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSerie
  • CVE-2025-69276 2026-01-12 · CVSS 2.3
    Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum:
  • CVE-2025-69275 2026-01-12 · CVSS 7.1
    Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS.This issue affects DX NetOps
  • CVE-2025-69274 2026-01-12 · CVSS 2.3
    Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects D
  • CVE-2025-69273 2026-01-12 · CVSS 8.7
    Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.
  • CVE-2025-69272 2026-01-12 · CVSS 5.3
    Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX Net
  • CVE-2025-69271 2026-01-12 · CVSS 2.3
    Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectru
  • CVE-2025-69270 2026-01-12 · CVSS 2.3
    Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue aff
  • CVE-2025-69269 2026-01-12 · CVSS 7.1
    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows
  • CVE-2025-69268 2026-01-12 · CVSS 5.3
    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allow
  • CVE-2025-69267 2026-01-12 · CVSS 8.8
    Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversa
  • CVE-2025-4971 2025-05-19 · CVSS 8.5
    Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to e
  • CVE-2022-33739 2022-06-16
    CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any fi
  • CVE-2022-33756 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially
  • CVE-2022-33755 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enum
  • CVE-2022-33754 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentiall
  • CVE-2022-33753 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially ele
  • CVE-2022-33752 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentiall
  • CVE-2022-33751 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially acc
  • CVE-2022-33750 2022-06-16
    CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute
  • CVE-2022-23992 2022-02-14
    XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote
  • CVE-2022-22689 2022-02-04
    CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient inp
  • CVE-2022-23083 2022-01-18
    NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to
  • CVE-2021-44050 2021-12-02
    CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that c
  • CVE-2020-29478 2021-01-05
    CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of

All CVE Program partners