Unified Infrastructure Management

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-23	CVE-2020-28421	Improper Privilege Management vulnerability in Broadcom Unified Infrastructure Management CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges. local low complexity broadcom CWE-269	4.6
2020-02-18	CVE-2020-8012	Classic Buffer Overflow vulnerability in Broadcom Unified Infrastructure Management CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. network low complexity broadcom CWE-120	7.5
2020-02-18	CVE-2020-8011	NULL Pointer Dereference vulnerability in Broadcom Unified Infrastructure Management CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. network low complexity broadcom CWE-476	5.0
2020-02-18	CVE-2020-8010	Unspecified vulnerability in Broadcom Unified Infrastructure Management CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. network low complexity broadcom critical	10.0