Vulnerability Assessment (VA) Findings in APIM Developer Portal 5.4 OVA

Products

• CA API Developer Portal

Issue/Introduction

Security scans may identify various vulnerabilities on the APIM Developer Portal 5.4 OVA, including (but not limited to) Debian security updates (e.g., dsa-6381, dsa-6382, dsa-6297) and associated CVEs.

Environment

API Developer Portal 5.4 OVA

Resolution

These vulnerabilities are remediated in the July 2026 Platform Patch.

• Patch File Name: Layer7_API_PortalPlatformUpdate_Debian-13_2026-07-28.zip
• Action Required:
  1. Download the July 2026 Platform Patch from the Broadcom Support Portal.
  2. Install the patch on the APIM Developer Portal 5.4 OVA.
  3. After installation, re-run your VA scan to verify that the identified vulnerabilities have been remediated.

Additional Information

Broadcom Support follows a process of supporting Monthly Platform Patches (MPP) for the latest release and subsequent releases. It is recommended to keep your environment updated with the latest available patches to maintain security compliance.