Vulnerabilities > Broadcom > Spectrum > 9.2

DATE CVE VULNERABILITY TITLE RISK
2015-04-08 CVE-2015-2828 Permissions, Privileges, and Access Controls vulnerability in Broadcom Spectrum 9.2/9.3
CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
network
low complexity
broadcom CWE-264
critical
9.0
2015-04-08 CVE-2015-2827 Cross-site Scripting vulnerability in Broadcom Spectrum 9.2/9.3
Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
network
broadcom CWE-79
3.5