CVEs, vulnerabilities, and security advisories for Broadcom, CA, Symantec, and VMware products

Products

• Endpoint Protection
• CA Workload Automation DE
• CA Spectrum
• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• Autosys Workload Automation
• CA Privileged Identity Management Endpoint (PIM)
• Data Loss Prevention
• VIP Service
• Web Isolation
• CA Agile Requirements Designer
• CA Automic Applications Manager (AM)
• Automation Analytics & Intelligence
• CA Service Desk Manager
• CA Harvest Software Change Manager
• Clarity PPM On Premise
• DX NetOps
• Common Services
• CA Privileged Access Manager (PAM)
• Automation Point
• CA Network Flow Analysis (NetQos / NFA)
• Output Management Web Viewer
• CA Workload Automation DE - Business Agents (dSeries)
• CA Workload Automation DE - Scheduler (dSeries)
• CA Workload Automation DE - System Agent (dSeries)
• DSERIES- SERVER
• Compliance Event Manager
• OPS/MVS Event Management & Automation
• Endpoint Security
• Messaging Gateway
• Data Center Security Server
• Endpoint Detection and Response
• Protection Engine for Cloud Services
• Protection Engine for NAS
• Cloud Workload Protection
• Mail Security for Microsoft Exchange
• VIP Authentication Hub

Issue/Introduction

Find information about potential security risks that affect Broadcom, CA, Symantec, and VMware products, and their available patches and remediation.

Resolution

• Browse or search for security advisories - search using Common Vulnerabilities and Exposures (CVE) numbers, keywords, and more.
• Symantec Security Center
• Report a Symantec product vulnerability.

Browse security advisories by Broadcom software division:

• Mainframe Software Security Advisories
• Enterprise Software Security Advisories
• Cyber Security Software Security Advisories
• Tanzu Security Advisories
• VMware Cloud Foundation Security Advisories
• Application Networking and Security Security Advisories
• Software Defined Edge Security Advisories

Additional Information

Log4j vulnerability

• Broadcom response to Log4j vulnerability
• Enterprise Software Security Advisory: See ESDSA19792 (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-4104)
• Mainframe Software Security Advisory: See MFDSA19790 (CVE-2021-44228, CVE-2021-45046)
• Symantec Security Advisory: See SYMSA19793 (CVE-2021-44228, CVE-2021-45046, CVE-2021-4104)
• Brocade Security Advisory: See BSA-2021-1651 (CVE-2021-44228)

Other vulnerabilities

cve-2024-6387 cve-2024-37085 cve-2024-39894 cve-2022-37017 cve-2023-48795 cve-2024-37086 cve-2024-37079 cve-2024-40725 cve-2024-3596 cve-2024-40898 cve-2024-34750 cve-2023-28531 cve-2023-38408 cve-2024-39884 cve-2018-3646 cve-2011-1473

apache log4j version apache log4j remote code execution apache log4j 1.x vulnerabilities apache log4j2 agile requirements designer and log4j apache and log4j applications manager log4j automation point and log4j automic automation and log4j ca7 and log4j capam and log4j clarity and log4j common services and log4j compliance event manager and log4j data loss prevention (dlp) and log4j dx netops and log4j harvest and log4j itms and log4j

netops and log4j network flow analysis (nfa) and log4j ops/mvs event management and automation log4j output management web viewer and log4j policy server and log4j privilege identity manager (pam) and log4j sannav and log4j service desk and log4j siteminder and log4j spectrum and log4j symantec endpoint protection (sep) 14.2 14.3 and log4j vcenter and log4j vip and log4j web isolation and log4j workload automation 12.0.02.00 and log4j workload automation ae | de | dseries and log4j workload client 12.0.02.00 and log4j workload control center and log4j ccs_log4j_critical_vulnerabilities_detection.zip log4j 2.17.1 log4j_format_msg_no_lookups | log4j_format_msg_no_lookups=true log4j_patch_on_prem log4j-1.2.14.jar log4jproject.tar.gz log4jremovalscripts.zip log_4j logj4 log4g log4j log4j-1.2.17.jar log4j uninstaller zeroday zero day