VendorsBroadcomca_api_developer_portalall versions
Vulnerabilities

Broadcom CA API Developer Portal

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2020-11658
CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.
Published 2020-04-15 · Modified
9.8EPSS 0.024
CVE-2020-11666
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.
Published 2020-04-15 · Modified
8.8EPSS 0.030
CVE-2020-11661
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.
Published 2020-04-15 · Modified
8.1EPSS 0.019
CVE-2020-11662
CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.
Published 2020-04-15 · Modified
7.5EPSS 0.032
CVE-2020-11660
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.
Published 2020-04-15 · Modified
6.5EPSS 0.014
CVE-2020-11665
CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.
Published 2020-04-15 · Modified
6.1EPSS 0.016
CVE-2020-11664
CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.
Published 2020-04-15 · Modified
6.1EPSS 0.014
CVE-2020-11663
CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attacks.
Published 2020-04-15 · Modified
6.1EPSS 0.013
CVE-2018-6590
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.
Published 2018-08-03 · Modified
6.1EPSS 0.007
CVE-2020-11659
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.
Published 2020-04-15 · Modified
4.3EPSS 0.009