Broadcom Symantec It Management Suite vulnerabilities

3 CVEs affecting Broadcom Symantec It Management Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15379, published 2026-07-17.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-5333, published 2025-07-06. Critical severity, CVSS 9.5. EPSS: 0.7% chance of exploitation in the next 30 days. Remote attackers can execute arbitrary code in the context of the vulnerable service process.
• CVE-2026-15379, published 2026-07-17. Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days. The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No…
• CVE-2025-24508, published 2025-07-07. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage