CVE-2011-1653: Broadcom Total Defense

High severity, CVSS 10.0. EPSS: 88.7% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.

Affected products

• Broadcom Total Defense: version r12 only

Published 2011-04-18. Last modified 2026-06-16.