PT-2026-1943 · Broadcom · Broadcom Dx Netops Spectrum

Published 2026-01-12 · Updated 2026-01-12 · CVE-2025-69268

Positive Technologies · (AI Summary)

CVSS v3.1

6.1

Medium

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.8 and earlier

Description The software contains a Reflected Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This impacts installations on Windows and Linux operating systems.

Recommendations Update Broadcom DX NetOps Spectrum to a version later than 24.3.8.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-69268

Affected Products

Broadcom Dx Netops Spectrum

References · 6

• https://osv.dev/vulnerability/CVE-2025-69268 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69268 · Security Note
• https://twitter.com/CVEnew/status/2010571488110465246 · Twitter Post
• https://t.me/cveNotify/148383 · Telegram Post
• https://t.me/CVEtracker/41967 · Telegram Post