Broadcom Single Sign-On vulnerabilities

2 CVEs affecting Broadcom Single Sign-On, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6854, published 2016-03-24.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-6853, published 2016-03-24. Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days. The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR5, R12.51 before CR4, and R12.52 before SP1 CR3 allows…
• CVE-2015-6854, published 2016-03-24. Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days. The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 before CR5 allow remote attackers to cause a denial of…