https://vulnogram.org/ Most recent CVEs assigned by CA Technologies - A Broadcom Company (ca). https://vulnogram.org/seaview/icons/ca.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-8370 https://vulnogram.org/CVE-2026-8370 Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 allows Privilege Escalation, Target Programs with E… High Tue, 19 May 2026 18:42:00 GMT https://vulnogram.org/CVE-2025-69276 https://vulnogram.org/CVE-2025-69276 Deserialization of Untrusted Data vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Object Injection.This issue affects DX NetOps Spectrum: 24.3.13 and earlier. Low Mon, 12 Jan 2026 04:53:09 GMT https://vulnogram.org/CVE-2025-69275 https://vulnogram.org/CVE-2025-69275 Dependency on Vulnerable Third-Party Component vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows DOM-Based XSS.This issue affects DX NetOps Spectrum: 24.3.9 and earlier. High Mon, 12 Jan 2026 04:47:07 GMT https://vulnogram.org/CVE-2025-69274 https://vulnogram.org/CVE-2025-69274 Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects DX NetOps Spectrum: 24.3.10 and earlier. Low Mon, 12 Jan 2026 04:42:39 GMT https://vulnogram.org/CVE-2025-69273 https://vulnogram.org/CVE-2025-69273 Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier. High Mon, 12 Jan 2026 04:38:53 GMT https://vulnogram.org/CVE-2025-69272 https://vulnogram.org/CVE-2025-69272 Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier. Medium Mon, 12 Jan 2026 04:33:37 GMT https://vulnogram.org/CVE-2025-69271 https://vulnogram.org/CVE-2025-69271 Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier. Low Mon, 12 Jan 2026 04:27:55 GMT https://vulnogram.org/CVE-2025-69270 https://vulnogram.org/CVE-2025-69270 Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier. Low Mon, 12 Jan 2026 04:20:13 GMT https://vulnogram.org/CVE-2025-69269 https://vulnogram.org/CVE-2025-69269 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier. High Mon, 12 Jan 2026 04:10:44 GMT https://vulnogram.org/CVE-2025-69268 https://vulnogram.org/CVE-2025-69268 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.8 and earlier. Medium Mon, 12 Jan 2026 03:59:17 GMT https://vulnogram.org/CVE-2025-69267 https://vulnogram.org/CVE-2025-69267 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps Spectrum: 24.3.8 and earlier. High Mon, 12 Jan 2026 03:53:00 GMT https://vulnogram.org/CVE-2025-4971 https://vulnogram.org/CVE-2025-4971 Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges. High Mon, 19 May 2025 23:42:23 GMT https://vulnogram.org/CVE-2022-33739 https://vulnogram.org/CVE-2022-33739 CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system. Thu, 16 Jun 2022 21:25:45 GMT https://vulnogram.org/CVE-2022-33756 https://vulnogram.org/CVE-2022-33756 CA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic AutomationEngine that could allow a remote attacker to potentially access sensitive data. Thu, 16 Jun 2022 21:23:58 GMT https://vulnogram.org/CVE-2022-33755 https://vulnogram.org/CVE-2022-33755 CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users. Thu, 16 Jun 2022 21:23:47 GMT https://vulnogram.org/CVE-2022-33754 https://vulnogram.org/CVE-2022-33754 CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. Thu, 16 Jun 2022 21:23:34 GMT https://vulnogram.org/CVE-2022-33753 https://vulnogram.org/CVE-2022-33753 CA Automic Automation 12.2 and 12.3 contain an insecure file creation and handling vulnerability in the Automic agent that could allow a user to potentially elevate privileges. Thu, 16 Jun 2022 21:21:27 GMT https://vulnogram.org/CVE-2022-33752 https://vulnogram.org/CVE-2022-33752 CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary code. Thu, 16 Jun 2022 21:21:17 GMT https://vulnogram.org/CVE-2022-33751 https://vulnogram.org/CVE-2022-33751 CA Automic Automation 12.2 and 12.3 contain an insecure memory handling vulnerability in the Automic agent that could allow a remote attacker to potentially access sensitive data. Thu, 16 Jun 2022 21:21:04 GMT https://vulnogram.org/CVE-2022-33750 https://vulnogram.org/CVE-2022-33750 CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands. Thu, 16 Jun 2022 21:20:55 GMT https://vulnogram.org/CVE-2022-23992 https://vulnogram.org/CVE-2022-23992 XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges. Mon, 14 Feb 2022 21:04:34 GMT https://vulnogram.org/CVE-2022-22689 https://vulnogram.org/CVE-2022-22689 CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or c… Fri, 04 Feb 2022 22:29:27 GMT https://vulnogram.org/CVE-2022-23083 https://vulnogram.org/CVE-2022-23083 NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that could potentially allow an attacker to execute code on… Tue, 18 Jan 2022 16:52:35 GMT https://vulnogram.org/CVE-2021-44050 https://vulnogram.org/CVE-2021-44050 CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data. Thu, 02 Dec 2021 18:18:41 GMT https://vulnogram.org/CVE-2020-29478 https://vulnogram.org/CVE-2020-29478 CA Service Catalog 17.2 and 17.3 contain a vulnerability in the default configuration of the Setup Utility that may allow a remote attacker to cause a denial of service condition. Tue, 05 Jan 2021 17:24:46 GMT https://vulnogram.org/CVE-2020-28421 https://vulnogram.org/CVE-2020-28421 CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges. Mon, 23 Nov 2020 15:43:25 GMT https://vulnogram.org/CVE-2020-11660 https://vulnogram.org/CVE-2020-11660 CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information. Wed, 15 Apr 2020 20:47:13 GMT https://vulnogram.org/CVE-2020-11659 https://vulnogram.org/CVE-2020-11659 CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action. Wed, 15 Apr 2020 20:47:05 GMT https://vulnogram.org/CVE-2020-11658 https://vulnogram.org/CVE-2020-11658 CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization. Wed, 15 Apr 2020 20:46:55 GMT https://vulnogram.org/CVE-2020-11663 https://vulnogram.org/CVE-2020-11663 CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks. Wed, 15 Apr 2020 19:08:37 GMT https://vulnogram.org/CVE-2020-11662 https://vulnogram.org/CVE-2020-11662 CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information. Wed, 15 Apr 2020 19:08:30 GMT https://vulnogram.org/CVE-2020-11661 https://vulnogram.org/CVE-2020-11661 CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data. Wed, 15 Apr 2020 19:08:23 GMT https://vulnogram.org/CVE-2020-11666 https://vulnogram.org/CVE-2020-11666 CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges. Wed, 15 Apr 2020 19:03:19 GMT https://vulnogram.org/CVE-2020-11665 https://vulnogram.org/CVE-2020-11665 CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks. Wed, 15 Apr 2020 19:03:09 GMT https://vulnogram.org/CVE-2020-11664 https://vulnogram.org/CVE-2020-11664 CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks. Wed, 15 Apr 2020 19:02:58 GMT https://vulnogram.org/CVE-2020-8012 https://vulnogram.org/CVE-2020-8012 CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitrary code. Tue, 18 Feb 2020 03:12:16 GMT https://vulnogram.org/CVE-2020-8010 https://vulnogram.org/CVE-2020-8010 CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system. Tue, 18 Feb 2020 03:11:43 GMT https://vulnogram.org/CVE-2020-8011 https://vulnogram.org/CVE-2020-8011 CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service. Tue, 18 Feb 2020 03:11:32 GMT https://vulnogram.org/CVE-2019-19544 https://vulnogram.org/CVE-2019-19544 CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3… Wed, 08 Jan 2020 16:03:13 GMT https://vulnogram.org/CVE-2019-19518 https://vulnogram.org/CVE-2019-19518 CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands. Wed, 08 Jan 2020 15:57:21 GMT https://vulnogram.org/CVE-2019-19231 https://vulnogram.org/CVE-2019-19231 An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges. High Fri, 20 Dec 2019 21:08:06 GMT https://vulnogram.org/CVE-2019-19230 https://vulnogram.org/CVE-2019-19230 An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code. Critical Network Exploitable Mon, 09 Dec 2019 20:36:49 GMT https://vulnogram.org/CVE-2019-13657 https://vulnogram.org/CVE-2019-13657 CA Performance Management 3.5.x, 3.6.x before 3.6.9, and 3.7.x before 3.7.4 have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security. Critical Network Exploitable Thu, 17 Oct 2019 18:45:16 GMT https://vulnogram.org/CVE-2019-13658 https://vulnogram.org/CVE-2019-13658 CA Network Flow Analysis 9.x and 10.0.x have a default credential vulnerability that can allow a remote attacker to execute arbitrary commands and compromise system security. Critical Network Exploitable Wed, 02 Oct 2019 16:14:53 GMT https://vulnogram.org/CVE-2019-13656 https://vulnogram.org/CVE-2019-13656 An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code. Critical Network Exploitable Fri, 06 Sep 2019 14:44:42 GMT https://vulnogram.org/CVE-2019-7393 https://vulnogram.org/CVE-2019-7393 A UI redress vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x may allow a remote attacker to gain sensitive i… Tue, 28 May 2019 18:28:30 GMT https://vulnogram.org/CVE-2019-7394 https://vulnogram.org/CVE-2019-7394 A privilege escalation vulnerability in the administrative user interface of CA Technologies CA Strong Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 7.1.x and CA Risk Authentication 9.0.x, 8.2.x, 8.1.x, 8.0.x, 3.1.x allows an authenticated attacker to g… Tue, 28 May 2019 18:25:49 GMT https://vulnogram.org/CVE-2019-7392 https://vulnogram.org/CVE-2019-7392 An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration. Tue, 26 Feb 2019 18:00:00 GMT https://vulnogram.org/CVE-2019-6504 https://vulnogram.org/CVE-2019-6504 Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attacks via a crafted object. Wed, 06 Feb 2019 00:00:00 GMT https://vulnogram.org/CVE-2018-19635 https://vulnogram.org/CVE-2018-19635 CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface. Tue, 22 Jan 2019 15:00:00 GMT