A Cross-Site Scripting (XSS) vulnerability exists in Broadcom Symantec Endpoint Detection and Response (SEDR) Console versions 4.12 and prior to 4.13. This vulnerability allows an attacker to inject malicious scripts that execute in the context of another user's session, potentially leading to unauthorized access to restricted functionality or information.
CVE-2026-59354 is a critical vulnerability in Spring Security's OAuth2 Authorization Server module versions 7.0.0 through 7.0.4. When Dynamic Client Registration is enabled, the registration endpoint inadequately validates certain client metadata fields. An attacker with a valid Initial Access Token can register a malicious client with crafted metadata, potentially leading to Stored Cross-Site Scripting (XSS), Privilege Escalation, or Server-Side Request Forgery (SSRF) depending on server configuration and metadata usage.
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required (ITMS 8.7.3)
The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries without re-impersonating the caller. Any local standard user can therefore read SYSTEM-readable files — including configuration files, service logs, and secrets stored with SYSTEM/Administrator-only ACLs — by querying the provider directly.
A local privilege escalation vulnerability (CWE-250) exists in Broadcom Symantec Endpoint Protection CleanWipe Removal Tool for macOS prior to version 16.0.0.65. This vulnerability allows an attacker with limited privileges to escalate their privileges to administrative level. The CVSS 4.0 base score is 5.4, indicating a medium severity. No patch or official remediation has been confirmed yet. The vulnerability affects versions prior to 16.0.0.65. No known exploits are reported in the wild at this time.
An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution.
Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 allows Privilege Escalation, Target Programs with Elevated Privileges.
This issue affects Automic Automation: < 24.4.4 HF1.
CVE-2026-3991 is a high-severity elevation of privilege vulnerability in Broadcom's Symantec Data Loss Prevention Windows Endpoint software. The issue involves inclusion of functionality from an untrusted control sphere (CWE-829), potentially allowing an attacker with limited privileges to gain elevated access to protected resources. This vulnerability affects versions prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15. No known exploits are reported in the wild. Patch status is not confirmed as no patch links or vendor advisory details are provided.
Cross-site Scripting (XSS) allows an attacker to submit specially crafted data to the application which is returned unaltered in the resulting web page.
CVE-2025-13919 is a medium severity vulnerability affecting Broadcom's Symantec Endpoint Protection Windows Client prior to versions 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3. It involves an uncontrolled search path element (CWE-427) that allows an attacker with limited privileges to hijack COM references in the Windows Registry. This hijacking can enable persistence and evasion of detection by redirecting legitimate COM object calls to malicious payloads. The vulnerability requires local access with low privileges and does not require user interaction. Although no known exploits are currently in the wild, the vulnerability impacts the integrity and availability of affected systems. European organizations relying on Symantec Endpoint Protection for endpoint security should prioritize patching to mitigate risks. Countries with significant deployments of Broadcom security products and critical infrastructure are more likely to be targeted. Mitigation involves applying vendor patches, auditing COM registry entries, and enforcing strict access controls on registry keys related to COM objects.
Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
WSS Agent, prior to 9.8.5, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
CVE-2025-69276 is a deserialization of untrusted data vulnerability in Broadcom DX NetOps Spectrum versions 24.3.13 and earlier on Windows and Linux platforms. This vulnerability allows object injection, potentially enabling an attacker to manipulate application behavior or cause denial of service. The CVSS 4.0 base score is 2.3, indicating low severity due to high attack complexity and limited impact on confidentiality, integrity, and availability. No known exploits are currently reported in the wild. European organizations using DX NetOps Spectrum for network monitoring should assess their exposure and plan updates. Mitigation primarily involves upgrading to a fixed version once available or applying vendor-recommended workarounds.
CVE-2025-69275 is a high-severity vulnerability in Broadcom DX NetOps Spectrum (version 24.3.9 and earlier) caused by a dependency on a vulnerable third-party component leading to DOM-based Cross-Site Scripting (XSS). The flaw allows an attacker to execute malicious scripts in the context of the affected application without requiring user interaction or authentication, though exploitation complexity is high. This vulnerability impacts confidentiality and integrity by potentially exposing sensitive data or enabling unauthorized actions within the management platform. European organizations using DX NetOps Spectrum for network monitoring and management are at risk, especially those in critical infrastructure sectors. No known exploits are currently in the wild, but the vulnerability’s presence in widely deployed network operations software necessitates prompt mitigation. Mitigation involves updating to a patched version once available, applying strict input validation and content security policies, and monitoring network traffic for suspicious activity. Countries with significant Broadcom DX NetOps Spectrum deployments and critical infrastructure reliance, such as Germany, France, the UK, and the Netherlands, are most likely to be affected. Given the CVSS 4.
CVE-2025-69274 is an authorization bypass vulnerability in Broadcom DX NetOps Spectrum versions 24.3.10 and earlier. It allows a user with limited privileges to escalate their privileges by exploiting a user-controlled key that bypasses authorization checks. The vulnerability affects both Windows and Linux deployments of the product. Although the CVSS score is low (2.3), the issue could lead to unauthorized privilege escalation within affected environments. No known exploits are currently in the wild, and no patches have been linked yet. The vulnerability stems from CWE-639, which involves authorization bypass through improper validation of user-controlled keys. European organizations using DX NetOps Spectrum for network monitoring and management should be aware of this risk, especially those with complex network infrastructures.
CVE-2025-69273 is a high-severity improper authentication vulnerability affecting Broadcom DX NetOps Spectrum versions 24.3.10 and earlier on Windows and Linux platforms. This flaw allows an attacker with low privileges to bypass authentication controls without user interaction, potentially gaining unauthorized access to the network monitoring system. The vulnerability impacts confidentiality and integrity highly, with limited impact on availability. No known exploits are currently reported in the wild. European organizations relying on DX NetOps Spectrum for network management face risks of unauthorized access, data exposure, and manipulation of monitoring data. Mitigation requires prompt patching once available, strict access controls, network segmentation, and enhanced monitoring of authentication attempts. Countries with significant Broadcom customer bases and critical infrastructure sectors, such as Germany, France, the UK, and the Netherlands, are most likely to be affected. Given the ease of exploitation and critical nature of network monitoring systems, this vulnerability demands urgent attention from defenders.
CVE-2025-69272 is a medium severity vulnerability in Broadcom DX NetOps Spectrum versions 21.2.1 and earlier that involves cleartext transmission of sensitive information. This flaw allows attackers to perform sniffing attacks on network traffic to capture sensitive data. The vulnerability affects both Windows and Linux deployments of the product. Exploitation requires network access and low privileges but no user interaction or authentication bypass. Although no known exploits are currently in the wild, the risk lies in potential interception of critical operational data. European organizations using DX NetOps Spectrum for network management could face confidentiality breaches if this vulnerability is exploited. Mitigation involves upgrading to a patched version once available or implementing network-level encryption and segmentation to protect sensitive communications. Countries with significant Broadcom enterprise deployments and critical infrastructure reliance on DX NetOps Spectrum are at higher risk.
CVE-2025-69271 is a vulnerability in Broadcom DX NetOps Spectrum versions 24.3.13 and earlier that involves insufficient protection of credentials, leading to potential sniffing attacks. The flaw allows attackers with low privileges and partial authentication to intercept sensitive credential data transmitted over the network. Although the CVSS score is low (2.3), the vulnerability could expose credentials if exploited, impacting confidentiality. No known exploits are currently reported in the wild, and no patches have been released yet. The vulnerability affects both Windows and Linux deployments of DX NetOps Spectrum, a network management solution widely used in enterprise environments. European organizations relying on this product for network operations could face risks of credential exposure, especially in sectors with critical infrastructure. Mitigation should focus on network segmentation, encryption of management traffic, and strict access controls to limit exposure.
CVE-2025-69270 is an information exposure vulnerability in Broadcom DX NetOps Spectrum (version 24.3.8 and earlier) that leaks sensitive session information through query strings in GET requests. This exposure can lead to session hijacking, allowing attackers with some privileges to impersonate legitimate users. The vulnerability affects both Windows and Linux deployments of the product. Although the CVSS score is low (2.3), the issue involves partial compromise of confidentiality and integrity without requiring user interaction. No known exploits are currently in the wild, and Broadcom has not yet published patches. European organizations using DX NetOps Spectrum should assess their exposure and apply compensating controls to protect session data. Countries with significant Broadcom enterprise presence and critical infrastructure relying on network monitoring tools are at higher risk.
