What’s Vulnerable › Vulnerabilities

CVE-2020-28421

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-23 · updated 2026-06-17

Description

CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges.

Affected products

• CA Technologies - A Broadcom Company CA Unified Infrastructure Management (Nimsoft/UIM): through 20.1

References

• http://seclists.org/fulldisclosure/2020/Nov/41
• https://support.broadcom.com/external/content/security-advisories/CA20201116-01-Security-Notice-for-CA-Unified-Infrastructure-Management/16565
• http://seclists.org/fulldisclosure/2020/Nov/41
• https://support.broadcom.com/external/content/security-advisories/CA20201116-01-Security-Notice-for-CA-Unified-Infrastructure-Management/16565

Get alerted when CVE-2020-28421 or the next vulnerability affects your stack