Skip to content
Broadcom Sannav vulnerabilities
-
broadcom brocade sannav, brocade sannav +1 more
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin...
CVE-2026-5769
5.6 Medium
-
broadcom brocade sannav, brocade sannav +1 more
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav...
CVE-2026-5049
6.9 Medium
-
broadcom brocade sannav, brocade sannav +1 more
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...
CVE-2026-5048
6.1 Medium
-
broadcom brocade sannav, brocade sannav +1 more
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...
CVE-2026-5047
8.2 High
-
broadcom sannav
SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0
CVE-2025-12774
4.6 Medium
-
broadcom sannav
Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a
CVE-2025-12773
7.1 High
-
broadcom sannav
Plaintext Switch admin login password is seen in Brocade SANnav support save
CVE-2025-12772
8.5 High
-
broadcom sannav
Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0
CVE-2025-12679
7.1 High
-
broadcom sannav
Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)
CVE-2025-12680
6.0 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)
CVE-2025-6392
6.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Cleartext storage of sensitive information in Brocade SANnav server audit logs.
CVE-2025-6390
5.1 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Plaintext security passwords are logged in the audit logs while executing openssl cmd
CVE-2025-4662
5.1 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Weak TLS Ciphers on Brocade SANnav OVA SSH port 22
CVE-2024-4282
8.2 High
-
broadcom brocade sannav, brocade sannav +1 more
Weak TLS Ciphers on Brocade SANnav port 443 & 18082
CVE-2024-10405
6.9 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Docker implementation in Brocade SANnav is missing Audit Rules.
CVE-2024-2240
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav encryption key is logged in the debug logs
CVE-2025-1053
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave
CVE-2024-10404
5.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav Information Disclosure Vulnerability
CVE-2022-43937
5.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade Fabric OS switch passwords when debugging is enabled
CVE-2022-43936
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Switch passwords and authorization IDs are printed in the embedded MLS DB file
CVE-2022-43935
5.3 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Weak Key-exchange algorithms
CVE-2022-43934
6.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
configuration secrets are logged in support-save
CVE-2022-43933
4.4 Medium
-
ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 more
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
CVE-2024-3596
Public exploitFix available
EPSS 14.9%
9.0 Critical
-
broadcom brocade sannav, brocade sannav +1 more
The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an...
CVE-2024-2860
7.8 High
-
brocade sannav, broadcom brocade sannav +1 more
By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)
CVE-2024-2859
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
SANnav versions exposes Kafka in the wan interface.
CVE-2024-4173
7.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Syslog traffic sent in clear-text
CVE-2024-4161
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Protection mechanisms
CVE-2024-4159
4.3 Medium
-
broadcom brocade sannav, brocade sannav +1 more
TLS/SSL weak message authentication code ciphers are added by default for port 18082
CVE-2024-29969
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
SQL Table names, column names, and SQL queries are collected in DR standby Supportsave
CVE-2024-29968
7.7 High
-
broadcom brocade sannav, brocade sannav +1 more
In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points
CVE-2024-29967
4.4 Medium
-
broadcom brocade sannav, brocade sannav +1 more
hard-coded credentials in the documentation that appear as the appliance root password
CVE-2024-29966
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
Insecure backup
CVE-2024-29965
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
CVE-2024-29964
5.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Insecure file permission setting that makes files world-readable
CVE-2024-29962
5.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav contains hardcoded TLS keys used by Docker
CVE-2024-29963
1.9 Low
-
broadcom brocade sannav, brocade sannav +1 more
supply-chain attack risk
CVE-2024-29961
8.2 High
-
broadcom brocade sannav, brocade sannav +1 more
Identical SSH keys utilized inside the OVA image (CVE-2024-29960)
CVE-2024-29960
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save
CVE-2024-29959
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.
CVE-2024-29958
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
Encryption key is stored in the DR log files
CVE-2024-29957
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav
CVE-2024-29956
6.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Insertion of Sensitive Information into Brocade SANnav Log File
CVE-2024-29955
5.0 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Clear text storage of sensistive information by manipulating command variables
CVE-2024-29952
5.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav has weak encryption in internal SSH ports
CVE-2024-29951
5.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption
CVE-2024-29950
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
Web authentication and authorization bypass
CVE-2023-31424
8.1 High
-
broadcom brocade sannav, brocade sannav +1 more
Possible information exposure through log file vulnerability
CVE-2023-31423
5.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Storage of clear text password in Brocade SANnav
CVE-2023-31925
5.4 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs
CVE-2022-33187
5.5 Medium
- Show olderLoading…