Vulnerability record · CVE-2015-3316 · published 17 June 2015

CVE-2015-3316: Broadcom network and systems management vulnerability

Broadcom · Network And Systems Management

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable.

4.6 CVSS 2.0 Medium EPSS 0.46% · top 62.7%

4.6CVSS 2.0 base score

0.46%EPSS exploitation probability, 30 days

NoNot in CISA KEV

7Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Network And Systems Management Broadcom CClient Automation Ca CNetwork And Systems Management Ca CNsm Job Management Option Ca CUniversal Job Management Agent Ca CVirtual Assurance For Infrastructure Managers Ca CWorkload Automation Ae Ca

References

Link	Tags
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-securi	Vendor Advisory
http://www.securityfocus.com/bid/75033
http://www.securitytracker.com/id/1032512
http://www.securitytracker.com/id/1032513
http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-securi	Vendor Advisory
http://www.securityfocus.com/bid/75033
http://www.securitytracker.com/id/1032512
http://www.securitytracker.com/id/1032513

Track CVE-2015-3316 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-0042Broadcom anti-spyware vulnerabilityMultiple unspecified vulnerabilities in the Arclib library (arclib.dll) before 7.3.0.15 in the CA Anti-Virus engine for CA Anti-Virus for the Enterpr…EPSS 4.3%28 Jan 2009 9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%13 Oct 2009 7.8CVE-2016-9795Broadcom ca workload automation ae improper input validation vulnerabilityThe casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance f…EPSS 0.54%27 Jan 2017 5.5CVE-2017-8391Ca client automation incorrect permission assignment vulnerabilityThe OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file …EPSS 0.30%6 May 2017 4.6CVE-2015-3318Ca client automation improper input validation vulnerabilityCA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM J…EPSS 0.37%17 Jun 2015 4.6CVE-2015-3317Ca client automation memory buffer overflow vulnerabilityCA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM J…EPSS 0.37%17 Jun 2015 4.3CVE-2009-3588Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 2.4%13 Oct 2009

Source: NIST National Vulnerability Database (record CVE-2015-3316), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.