Advisories · Technology
Broadcom DX NetOps Spectrum.
Every CVE that names Broadcom DX NetOps Spectrum among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Spectrum insecure deserialiation
- Broadcom DX NetOps Spectrum
- Insecure deserialization
- CVSS 7.1 High
Spectrum outdated java library in class-path
- Broadcom DX NetOps Spectrum
- CWE-1395
- CVSS 2.3 Low
Spectrum broken authorization scheme
- Broadcom DX NetOps Spectrum
- Broken access control
- CVSS 8.7 High
Spectrum broken authentication
- Broadcom DX NetOps Spectrum
- Authentication bypass
- CVSS 5.3 Medium
Spectrum password returned in clear
- Broadcom DX NetOps Spectrum
- Weak cryptography or TLS
- CVSS 2.3 Low
Spectrum basic authentication in use
- Broadcom DX NetOps Spectrum
- Hard-coded credentials
- CVSS 2.3 Low
Spectrum session token in URL
- Broadcom DX NetOps Spectrum
- CWE-598
- CVSS 7.1 High
Spectrum command injection in NCM service
- Broadcom DX NetOps Spectrum
- Command injection
- CVSS 5.3 Medium
Spectrum reflected XSS
- Broadcom DX NetOps Spectrum
- Cross-site scripting (XSS)
- CVSS 8.8 High
Spectrum directory path traversal
- Broadcom DX NetOps Spectrum
- Path traversal