Vulnerabilities (CVE)

Filtered by vendor Broadcom Subscribe
Filtered by product Raid Controller Web Interface
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-4334 1 Broadcom 1 Raid Controller Web Interface 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
CVE-2023-4335 2 Broadcom, Linux 2 Raid Controller Web Interface, Linux Kernel 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
CVE-2023-4339 1 Broadcom 1 Raid Controller Web Interface 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
CVE-2023-4343 1 Broadcom 1 Raid Controller Web Interface 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
CVE-2023-4326 1 Broadcom 1 Raid Controller Web Interface 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites
CVE-2023-4331 1 Broadcom 1 Raid Controller Web Interface 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
CVE-2023-4332 1 Broadcom 1 Raid Controller Web Interface 2023-08-21 N/A 7.5 HIGH
Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file