Broadcom Unified Infrastructure Management vulnerabilities

5 CVEs affecting Broadcom Unified Infrastructure Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10847, published 2025-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8012, published 2020-02-18. Critical severity, CVSS 9.8. EPSS: 77.4% chance of exploitation in the next 30 days. CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute…
CVE-2020-8010, published 2020-02-18. Critical severity, CVSS 9.8. EPSS: 50.7% chance of exploitation in the next 30 days. CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute…
CVE-2020-8011, published 2020-02-18. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash…
CVE-2025-10847, published 2025-10-01. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or…
CVE-2020-28421, published 2020-11-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges.