CVE-2025-69271 Spectrum basic authentication in use

Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier...

CVE-2025-69270 Spectrum session token in URL

Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69269 Spectrum command injection in NCM service

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier...

CVE-2025-69268

CVE-2025-69268 affects Broadcom DX NetOps Spectrum versions 24.3.8 and earlier. The root cause is improper neutralization of input during web page generation, leading to a reflected XSS vulnerability. Affected platforms include Windows and Linux. The vulnerability information is confirmed by mult...

CVE-2025-69268 Spectrum reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69268 Spectrum reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69267 Spectrum directory path traversal

Improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69267

CVE-2025-69267 is a path traversal vulnerability in Broadcom DX NetOps Spectrum (Windows/Linux). Affected versions are 24.3.8 and earlier; the root cause is improper restriction of a pathname to a restricted directory. The issue could enable access to files outside the intended scope. Red Hat and...

Broadcom DX NetOps Spectrum security vulnerabilities

Broadcom DX NetOps Spectrum is a network fault management and condition monitoring platform from Broadcom Corporation USA. A security vulnerability exists in Broadcom DX NetOps Spectrum version 24.3.13 and earlier, which stems from insufficient credential protection and could lead to a sniffing...

PT-2026-1951

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.13 and earlier Description A flaw exists in Broadcom DX NetOps Spectrum on Windows and Linux that allows for Object Injection due to deserialization of untrusted data. This issue impacts the software’s...

PT-2026-1944

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 23.3.6 and earlier Description A flaw exists in Broadcom DX NetOps Spectrum on Windows and Linux that allows for OS Command Injection. The issue is due to improper neutralization of special elements used in...

PT-2026-1946

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.13 and earlier Description A flaw exists in Broadcom DX NetOps Spectrum on Windows and Linux that allows for sniffing attacks due to insufficiently protected credentials. Recommendations Update to a...

PT-2026-1950

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.9 and earlier Description The software has a flaw due to reliance on a vulnerable third-party component, which allows for DOM-Based Cross-Site Scripting XSS. DOM-Based XSS occurs when client-side scrip...

Broadcom DX NetOps Spectrum security vulnerabilities

Broadcom DX NetOps Spectrum is a network fault management and condition monitoring platform from Broadcom Corporation USA. A security vulnerability exists in Broadcom DX NetOps Spectrum versions 24.3.13 and earlier, which stems from deserializing untrustworthy data and could lead to object...