broadcom brightstor arcserve backup

Name: broadcom brightstor arcserve backup
Brand: broadcom

productUS

cpe:2.3:a:broadcom:brightstor_arcserve_backup:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical37high3medium1low

updated 2026-10-23

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2005-2535US	high7.5	80.9% (100th)	Exploit	no fix	2005-08-10	5 versions
CVE-2006-5143US	high7.5	79.5% (100th)	Exploit	no fix	2006-10-10	3 versions
CVE-2007-2139US	high10.0	78.0% (100th)	Exploit	no fix	2007-04-25	3 versions
CVE-2006-6076US	high10.0	72.3% (99th)	Exploit	no fix	2006-11-24	3 versions
CVE-2007-0169US	high7.5	70.7% (99th)	Exploit	no fix	2007-01-11	2 versions
CVE-2005-0260US	high10.0	69.0% (99th)	Exploit	no fix	2005-05-02	= 11.1
CVE-2004-0932US	high7.5	63.6% (99th)	Exploit	no fix	2005-01-27	= 11.1
CVE-2007-4620US	high9.0	52.3% (99th)	Exploit	no fix	2008-04-07	2 versions
CVE-2007-2864US	high9.3	49.9% (99th)	Exploit	no fix	2007-06-06	5 versions
CVE-2006-6379US	high7.5	21.1% (98th)	Exploit	no fix	2006-12-10	4 versions
CVE-2004-0933US	high7.5	20.9% (98th)	Exploit	no fix	2005-01-27	= 11.1
CVE-2007-0168US	high7.5	20.4% (97th)	Exploit	no fix	2007-01-11	2 versions
CVE-2004-1096US	high7.5	18.5% (97th)	Exploit	no fix	2005-01-10	= 11.1
CVE-2004-0935US	high7.5	15.5% (97th)	Exploit	no fix	2005-01-27	= 11.1
CVE-2007-1785US	high7.1	15.4% (97th)	Exploit	no fix	2007-03-31	3 versions
CVE-2004-0937US	high7.5	14.9% (97th)	Exploit	no fix	2005-02-09	= 11.1
CVE-2004-0934US	high7.5	14.9% (97th)	Exploit	no fix	2005-01-27	= 11.1
CVE-2004-0936US	high7.5	14.9% (97th)	Exploit	no fix	2005-01-27	= 11.1
CVE-2007-0816US	medium5.0	11.4% (96th)	Exploit	no fix	2007-02-07	3 versions
CVE-2007-5332US	high10.0	5.29% (93rd)	Exploit	no fix	2007-10-13	5 versions
CVE-2008-1979US	medium5.0	3.63% (89th)	Exploit	no fix	2008-04-27	≤ 12.0.5454.0
CVE-2007-2863US	high10.0	23.4% (98th)	—	no fix	2007-06-06	3 versions
CVE-2005-3653US	high10.0	18.6% (97th)	—	no fix	2005-12-31	3 versions
CVE-2006-5171US	high10.0	16.7% (97th)	—	no fix	2007-01-16	2 versions
CVE-2007-5327US	high10.0	16.1% (97th)	—	no fix	2007-10-13	5 versions
CVE-2006-5172US	high10.0	15.1% (97th)	—	no fix	2007-01-16	2 versions
CVE-2008-2242US	high7.5	14.7% (97th)	—	no fix	2008-05-21	2 versions
CVE-2007-1447US	high10.0	14.6% (97th)	—	no fix	2007-03-16	≤ 11.5
CVE-2008-3175US	high10.0	14.4% (97th)	—	no fix	2008-08-01	2 versions
CVE-2007-3825US	high9.3	14.0% (97th)	—	no fix	2007-07-18	3 versions
CVE-2006-5142US	high7.5	13.6% (96th)	—	no fix	2006-10-10	= 11.5
CVE-2007-5330US	high10.0	13.5% (96th)	—	no fix	2007-10-13	5 versions
CVE-2008-2241US	high10.0	11.9% (96th)	—	no fix	2008-05-21	2 versions
CVE-2007-5325US	high10.0	11.9% (96th)	—	no fix	2007-10-13	5 versions
CVE-2007-5326US	high10.0	11.9% (96th)	—	no fix	2007-10-13	3 versions
CVE-2007-5331US	high10.0	9.90% (96th)	—	no fix	2007-10-13	3 versions
CVE-2007-5328US	high10.0	6.97% (94th)	—	no fix	2007-10-13	5 versions
CVE-2007-3875US	medium4.3	3.57% (89th)	—	no fix	2007-07-26	3 versions
CVE-2005-0349US	high7.5OT elevated	3.12% (88th)	—	no fix	2005-05-02	= 11.1
CVE-2007-5329US	high10.0	2.24% (83rd)	—	no fix	2007-10-13	3 versions
CVE-2007-1448US	low2.1	0.94% (60th)	—	no fix	2007-03-16	≤ 11.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer14 CVEs
CWE-20Improper Input Validation10 CVEs
CWE-121Stack-based Buffer Overflow7 CVEs
CWE-284Improper Access Control7 CVEs
CWE-264CWE-2644 CVEs
CWE-399CWE-3993 CVEs
CWE-189CWE-1892 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan