FEDRAMP CATALOG › General Support Systems (GSS)

General Support Systems (GSS)

Broadcom · package FR1722462413

Current status Authorized · Moderate impact · since 2026-07-07 Service modelPaaS MarketplaceRev5 · source: marketplace Security posture 8 critical 5 high 5 on KEV · 16 correlated CVEs

CMMC DOMAINS ADDRESSED

SC · System and Communications Protection IA · Identification and Authentication CM · Configuration Management

STATUS TIMELINE · SCD2

STATUS	IMPACT	FROM	TO
Authorized	Moderate	2026-07-07	current

AUTHORIZATIONS

AGENCY	TYPE	DATE
Department of Health and Human Services	Agency	2019-04-16

EXPOSED CVEs · CORRELATED TO THIS PRODUCT all exposures

SEVERITY	CVE	TITLE	PUBLISHED
CRITICAL	CVE-2026-87659	CVE-2026-87659: A critical authorization bypass vulnerability exists in the Management Server ha	2026-10-08
CRITICAL	CVE-2026-87684	CVE-2026-87684: A stack-based buffer overflow vulnerability exists in the SNMP daemon request ha	2026-10-08
MEDIUM	CVE-2026-47875	CVE-2026-47875: Applications that deserialize execution contexts with Jackson2ExecutionContextSt	2026-08-27
HIGH	CVE-2026-59310	Broadcom VMware vCenter Path Traversal Vulnerability	2026-08-18
MEDIUM	CVE-2026-57211	CVE-2026-57211: RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windo	2026-07-10
MEDIUM	CVE-2026-57216	CVE-2026-57216: RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11,	2026-07-10
HIGH	CVE-2026-22719	Broadcom VMware Aria Operations Command Injection Vulnerability	2026-03-03
HIGH	CVE-2024-37079	Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability	2026-01-23
HIGH	CVE-2025-41244	Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability	2025-10-30
HIGH	CVE-2025-1976	Broadcom Brocade Fabric OS Code Injection Vulnerability	2025-04-28
CRITICAL	CVE-2024-3596	CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local atta	2024-07-09
CRITICAL	CVE-2022-33186	CVE-2022-33186: A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j,	2022-12-08
CRITICAL	CVE-2021-40438	CVE-2021-40438: A crafted request uri-path can cause mod_proxy to forward the request to an orig	2021-09-16
CRITICAL	CVE-2019-3773	CVE-2019-3773: Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of al	2019-01-18
CRITICAL	CVE-2019-3774	CVE-2019-3774: Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were	2019-01-18
CRITICAL	CVE-2018-1273	CVE-2018-1273: Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older	2018-04-11