Approved changes feed: RSS · Atom

cpe:2.3:a:broadcom:project_portfolio_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBroadcom (9814e701-1071-5d68-93ef-4536eaf59407)
ProductProject Portfolio Management (99698167-b517-56e0-9a82-306d5559b023)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13826 vulnerable 2026-06-08 05:10:52.006543 Details available
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to conduct server side request forgery attacks.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T04:08:43.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13825 vulnerable 2026-06-08 05:10:52.006147 Details available
Insufficient input validation in the gridExcelExport functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute reflected cross-site scripting attacks.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T03:59:51.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13824 vulnerable 2026-06-08 05:10:52.005536 Details available
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T02:00:43.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13823 vulnerable 2026-06-08 05:10:52.002879 Details available
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-16T16:38:07.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13822 vulnerable 2026-06-08 05:10:51.999938 Details available
Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information.
Published: 2018-08-30T14:00:00.000Z
Updated: 2024-09-17T03:38:20.075Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.