CVE-2015-2828: Broadcom Spectrum

High severity, CVSS 9.0. EPSS: 3.2% chance of exploitation in the next 30 days.

CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.

Affected products

• Broadcom Spectrum: version 9.2 only; version 9.3 only

Published 2015-04-08. Last modified 2026-06-17.