Skip to contentBroadcom Brocade Sannav vulnerabilities
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin...CVE-2026-57695.6 Medium
- broadcom brocade sannav, brocade sannav +1 moreA path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav...CVE-2026-50496.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...CVE-2026-50486.1 Medium
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...CVE-2026-50478.2 High
- broadcom brocade sannav, brocade sannav +1 moreDaily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)CVE-2025-63926.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreCleartext storage of sensitive information in Brocade SANnav server audit logs.CVE-2025-63905.1 Medium
- broadcom brocade sannav, brocade sannav +1 morePlaintext security passwords are logged in the audit logs while executing openssl cmdCVE-2025-46625.1 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav OVA SSH port 22CVE-2024-42828.2 High
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav port 443 & 18082CVE-2024-104056.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreDocker implementation in Brocade SANnav is missing Audit Rules.CVE-2024-22408.6 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav encryption key is logged in the debug logsCVE-2025-10538.6 High
- broadcom brocade sannav, brocade sannav +1 moreClear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsaveCVE-2024-104045.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav Information Disclosure VulnerabilityCVE-2022-439375.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch passwords when debugging is enabledCVE-2022-439366.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreSwitch passwords and authorization IDs are printed in the embedded MLS DB fileCVE-2022-439355.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak Key-exchange algorithmsCVE-2022-439346.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreconfiguration secrets are logged in support-saveCVE-2022-439334.4 Medium
- ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 moreRADIUS Protocol under RFC2865 is vulnerable to forgery attacks.CVE-2024-3596Public exploitFix availableEPSS 14.9%9.0 Critical
- broadcom brocade sannav, brocade sannav +1 moreThe PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an...CVE-2024-28607.8 High
- brocade sannav, broadcom brocade sannav +1 moreBy default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)CVE-2024-28596.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreSANnav versions exposes Kafka in the wan interface.CVE-2024-41737.6 High
- broadcom brocade sannav, brocade sannav +1 moreSyslog traffic sent in clear-textCVE-2024-41618.6 High
- broadcom brocade sannav, brocade sannav +1 moreProtection mechanismsCVE-2024-41594.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreTLS/SSL weak message authentication code ciphers are added by default for port 18082CVE-2024-299697.5 High
- broadcom brocade sannav, brocade sannav +1 moreSQL Table names, column names, and SQL queries are collected in DR standby SupportsaveCVE-2024-299687.7 High
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount pointsCVE-2024-299674.4 Medium
- broadcom brocade sannav, brocade sannav +1 morehard-coded credentials in the documentation that appear as the appliance root passwordCVE-2024-299667.5 High
- broadcom brocade sannav, brocade sannav +1 moreInsecure backupCVE-2024-299656.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker filesCVE-2024-299645.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsecure file permission setting that makes files world-readableCVE-2024-299625.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav contains hardcoded TLS keys used by DockerCVE-2024-299631.9 Low
- broadcom brocade sannav, brocade sannav +1 moresupply-chain attack riskCVE-2024-299618.2 High
- broadcom brocade sannav, brocade sannav +1 moreIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)CVE-2024-299606.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support saveCVE-2024-299598.6 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.CVE-2024-299587.5 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key is stored in the DR log filesCVE-2024-299577.5 High
- broadcom brocade sannav, brocade sannav +1 morecleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnavCVE-2024-299566.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsertion of Sensitive Information into Brocade SANnav Log FileCVE-2024-299555.0 Medium
- broadcom brocade sannav, brocade sannav +1 moreClear text storage of sensistive information by manipulating command variablesCVE-2024-299525.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav has weak encryption in internal SSH portsCVE-2024-299515.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.3.1, v2.3.0a uses weak encryptionCVE-2024-299507.5 High
- broadcom brocade sannav, brocade sannav +1 moreWeb authentication and authorization bypassCVE-2023-314248.1 High
- broadcom brocade sannav, brocade sannav +1 morePossible information exposure through log file vulnerabilityCVE-2023-314235.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreStorage of clear text password in Brocade SANnavCVE-2023-319255.4 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logsCVE-2022-331875.5 Medium
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 moreSQL injection in JDBC Appender in Apache Log4j V1CVE-2022-23305Public exploitFix availableEPSS 66.5%9.8 Critical
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 moreDeserialization of untrusted data in JMSSink in Apache Log4j 1.xCVE-2022-23302Fix availableEPSS 63.8%8.8 High
- broadcom brocade sannav, fabric operating system +1 moreThe host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0...CVE-2020-153877.4 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition...CVE-2020-153797.5 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak...CVE-2020-153827.2 High
- Show olderLoading…