Broadcom Service Desk Manager vulnerabilities

3 CVEs affecting Broadcom Service Desk Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19635, published 2019-01-22.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-19634, published 2019-01-22. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey information.
• CVE-2018-19635, published 2019-01-22. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in the user interface.
• CVE-2013-2630, published 2013-07-31. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.