{"id":"CVE-2018-6446","aliases":["EUVD-2018-18203","GHSA-87cv-393j-2mjw"],"status":"published","title":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated,...","description":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01351,"percentile":0.7171,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2020-06-29T17:43:11Z","modified":"2026-06-17T02:01:50Z","products":[{"vendor":"broadcom","product":"brocade_network_advisor"},{"vendor":"brocade communications systems, inc.","product":"brocade network advisor"}],"references":[{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-841","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6446"},{"url":"https://github.com/advisories/GHSA-87cv-393j-2mjw"}],"sources":{"cve":[{"id":"CVE-2018-6446","description":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.","status":"published","published":"2020-06-29T17:43:11Z","modified":"2024-08-05T06:01:49.253Z","updated_at":"2026-11-02T14:35:05.961936Z"}],"euvd":[{"id":"EUVD-2018-18203","description":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.","status":"published","published":"2020-06-29T17:43:11Z","modified":"2024-08-05T06:01:49Z","updated_at":"2026-11-03T02:40:08.072854Z"}],"ghsa":[{"id":"GHSA-87cv-393j-2mjw","title":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated,...","description":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.","status":"published","published":"2022-05-24T17:21:57Z","modified":"2023-01-29T05:03:32Z","updated_at":"2026-11-02T14:45:20.476531Z"}],"nvd":[{"id":"CVE-2018-6446","description":"A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.","status":"published","published":"2020-06-29T18:15:11.55Z","modified":"2026-06-17T02:01:50.873Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:05:00.03074Z"}]}}