Broadcom Release Automation — known CVE vulnerabilities

Every CVE whose affected-product data names Broadcom Release Automation, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-15691 — CVSS 9.8 (critical): Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows attackers to…
• CVE-2015-8698 — CVSS 7.1 (high): CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0…
• CVE-2014-8246 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows…
• CVE-2014-8248 — CVSS 6.5 (medium): SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated…
• CVE-2015-8699 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227…
• CVE-2014-8247 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote…