CVE-2022-22689: Broadcom Ca Harvest Software Change Manager

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands.

Affected products

• Broadcom Ca Harvest Software Change Manager: version 13.0.3 only; version 13.0.4 only; version 14.0.0 only; version 14.0.1 only

Published 2022-02-04. Last modified 2026-06-17.