Known vulnerabilities in Isolation Segment 2.7

Vendor: Broadcom
Version: 2.7
Software CPE: cpe:2.3:a:broadcom:isolation_segment:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Isolation Segment version 2.7 Isolation Segment 2.7 is affected by 13 vulnerabilities: 1 critical, 4 medium, 8 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63055 - Unchecked Return Value
CVE-2019-9704
CWE-252 Low
No
No
2.7.45, 2.10.25, 2.11.14, 2.12.8 11.05.2022 SB2022051133
SB2022051206
SB2022051207
and 7 more
#VU63054 - Allocation of Resources Without Limits or Throttling
CVE-2019-9705
CWE-770 Low
No
No
2.7.45, 2.10.25, 2.11.14, 2.12.8 11.05.2022 SB2022051133
SB2022051206
SB2022051207
and 7 more
#VU63053 - Use After Free
CVE-2019-9706
CWE-416 Low
No
No
2.7.45, 2.10.25, 2.11.14, 2.12.8 11.05.2022 SB2022051133
SB2022051206
SB2022051207
and 3 more
#VU62883 - Use After Free
CVE-2020-35512
CWE-416 Low
No
No
2.7.45, 2.10.25, 2.11.14, 2.12.8 09.05.2022 SB2021021526
SB2022050921
SB2022051206
and 11 more
#VU48587 - Allocation of Resources Without Limits or Throttling
CVE-2020-8037
CWE-770 Medium
No
No
2.7.44, 2.10.24, 2.11.13, 2.12.7 04.11.2020 SB2020110433
SB2020112103
SB2021042704
and 12 more
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999
CWE-122 Critical
Public exploit available
Exploited
2.7.27, 2.8.21, 2.9.15, 2.10.7 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more
#VU47546 - Improper Access Control
CVE-2020-12352
CWE-284 Medium
Public exploit available
No
2.7.26, 2.8.20, 2.9.14, 2.10.6 13.10.2020 SB2020101322
SB2020101803
SB2020101804
and 35 more
#VU47545 - Improper input validation
CVE-2020-12351
CWE-20 Medium
Public exploit available
No
2.7.26, 2.8.20, 2.9.14, 2.10.6 13.10.2020 SB2020101322
SB2020101803
SB2020101804
and 32 more
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116
CWE-93 Medium
No
No
2.7.26, 2.8.20, 2.9.14, 2.10.6 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU30281 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-20807
CWE-78 Low
No
No
2.7.26, 2.8.20, 2.9.14, 2.10.6 28.05.2020 SB2020052815
SB2020061148
SB2020110918
and 9 more
#VU21949 - Out-of-bounds read
CVE-2018-16301
CWE-125 Low
No
No
2.7.44, 2.10.24, 2.11.13, 2.12.7 21.10.2019 SB2019102102
SB2019102103
SB2019100318
and 23 more
#VU31389 - Exposure of sensitive information to an unauthorized actor
CVE-2017-17087
CWE-200 Low
No
No
2.7.26, 2.8.20, 2.9.14, 2.10.6 01.12.2017 SB2017120122
SB2020112312
SB2021111514
and 10 more
#VU7010 - Permissions, Privileges, and Access Controls
CVE-2017-9525
CWE-264 Low
No
No
2.7.45, 2.10.25, 2.11.14, 2.12.8 12.06.2017 SB2017061204
SB2017061209
SB2022051133
and 5 more