Skip to content

Broadcom · weakness class

Input Validation and Logic

13 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow rem…CVE-2012-2619Broadcom · 13% likely

    CWE-20

  2. CA 2E Web Option r8.1.2 accepts a predictable substring of a W2E_SSNID session token in place of the entire token, which allows remote attackers to hijack sessions by changing cha…CVE-2014-1219Broadcom · 4.6% likely

    CWE-20

  3. Broadcom brcmfmac driver is vulnerable to a frame validation bypassCVE-2019-9503Broadcom · CVSS 7.9 · 3.3% likely

    CWE-20

  4. XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execut…CVE-2022-23992Broadcom · 2.4% likely

    CWE-20

  5. CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via…CVE-2012-1662Broadcom · 2.1% likely

    CWE-20

  6. CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary…CVE-2022-33754Broadcom · 1.9% likely

    CWE-20

  7. CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary…CVE-2022-33752Broadcom · 1.9% likely

    CWE-20

  8. A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.CVE-2022-33178Broadcom · CVSS 7.2 · 1.7% likely

    CWE-20

  9. Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for…CVE-2020-15379Broadcom · 1.3% likely

    CWE-20

  10. Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerabilityCVE-2025-4663Broadcom · CVSS 6.8 · 0.4% likely

    CWE-754

  11. Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in the command line interface when secccryp…CVE-2020-15375Broadcom · 0.3% likely

    CWE-20

  12. An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.CVE-2025-24501Broadcom · CVSS 5.3 · 0.3% likely

    CWE-20

  13. An improper input validation the CSRF filter results in unsanitized user input written to the application logs.CVE-2025-24504Broadcom · CVSS 5.3 · 0.2% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.