broadcom symantec critical system protection

Name: broadcom symantec critical system protection
Brand: broadcom

productUS

cpe:2.3:a:broadcom:symantec_critical_system_protection:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical7high2medium1low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-9225US	medium4.0	9.22% (95th)	Exploit	no fix	2015-01-21	= 5.2.9
CVE-2014-9224US	low3.5	4.59% (92nd)	Exploit	no fix	2015-01-21	= 5.2.9
CVE-2014-7289US	medium6.5	4.55% (92nd)	Exploit	no fix	2015-01-21	= 5.2.9
CVE-2014-9226US	high7.2	1.54% (75th)	Exploit	no fix	2015-01-21	= 5.2.9
CVE-2015-8799US	high7.6	5.26% (93rd)	—	no fix	2016-06-08	≤ 5.2.9
CVE-2014-3440US	high9.0	3.31% (88th)	—	no fix	2015-01-21	= 5.2.9
CVE-2015-8798US	high8.0	2.41% (84th)	—	no fix	2016-06-08	≤ 5.2.9
CVE-2013-5016US	high7.6	2.35% (84th)	—	no fix	2014-05-08	≤ 5.2.8
CVE-2019-18374US	critical9.8	1.67% (77th)	—	no fix	2019-11-25	= 8.0.0
CVE-2015-8157US	high8.8	1.50% (74th)	—	no fix	2016-06-08	≤ 5.2.9
CVE-2015-8800US	high7.3	1.18% (67th)	—	no fix	2016-06-08	= 5.2.9

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-264CWE-2642 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.