Skip to contentBrocade Sannav vulnerabilities
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin...CVE-2026-57695.6 Medium
- broadcom brocade sannav, brocade sannav +1 moreA path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav...CVE-2026-50496.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...CVE-2026-50486.1 Medium
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...CVE-2026-50478.2 High
- broadcom brocade sannav, brocade sannav +1 moreDaily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)CVE-2025-63926.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreCleartext storage of sensitive information in Brocade SANnav server audit logs.CVE-2025-63905.1 Medium
- broadcom brocade sannav, brocade sannav +1 morePlaintext security passwords are logged in the audit logs while executing openssl cmdCVE-2025-46625.1 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav OVA SSH port 22CVE-2024-42828.2 High
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav port 443 & 18082CVE-2024-104056.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreDocker implementation in Brocade SANnav is missing Audit Rules.CVE-2024-22408.6 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav encryption key is logged in the debug logsCVE-2025-10538.6 High
- broadcom brocade sannav, brocade sannav +1 moreClear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsaveCVE-2024-104045.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreThe PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an...CVE-2024-28607.8 High
- brocade sannav, broadcom brocade sannav +1 moreBy default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)CVE-2024-28596.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreSANnav versions exposes Kafka in the wan interface.CVE-2024-41737.6 High
- broadcom brocade sannav, brocade sannav +1 moreSyslog traffic sent in clear-textCVE-2024-41618.6 High
- broadcom brocade sannav, brocade sannav +1 moreProtection mechanismsCVE-2024-41594.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreTLS/SSL weak message authentication code ciphers are added by default for port 18082CVE-2024-299697.5 High
- broadcom brocade sannav, brocade sannav +1 moreSQL Table names, column names, and SQL queries are collected in DR standby SupportsaveCVE-2024-299687.7 High
- broadcom brocade sannav, brocade sannav +1 moreIn Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount pointsCVE-2024-299674.4 Medium
- broadcom brocade sannav, brocade sannav +1 morehard-coded credentials in the documentation that appear as the appliance root passwordCVE-2024-299667.5 High
- broadcom brocade sannav, brocade sannav +1 moreInsecure backupCVE-2024-299656.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker filesCVE-2024-299645.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsecure file permission setting that makes files world-readableCVE-2024-299625.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav contains hardcoded TLS keys used by DockerCVE-2024-299631.9 Low
- broadcom brocade sannav, brocade sannav +1 moresupply-chain attack riskCVE-2024-299618.2 High
- broadcom brocade sannav, brocade sannav +1 moreIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)CVE-2024-299606.8 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support saveCVE-2024-299598.6 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.CVE-2024-299587.5 High
- broadcom brocade sannav, brocade sannav +1 moreEncryption key is stored in the DR log filesCVE-2024-299577.5 High
- broadcom brocade sannav, brocade sannav +1 morecleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnavCVE-2024-299566.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreInsertion of Sensitive Information into Brocade SANnav Log FileCVE-2024-299555.0 Medium
- broadcom brocade sannav, brocade sannav +1 moreClear text storage of sensistive information by manipulating command variablesCVE-2024-299525.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav has weak encryption in internal SSH portsCVE-2024-299515.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.3.1, v2.3.0a uses weak encryptionCVE-2024-299507.5 High
- broadcom brocade sannav, brocade sannav +1 moreStorage of clear text password in Brocade SANnavCVE-2023-319255.4 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logsCVE-2022-331875.5 Medium
- broadcom sannavIn Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server...CVE-2022-281687.5 High
- broadcom sannavBrocade SANnav before Brocade SANvav v. 2.2.0.2 and Brocade SANanv v.2.1.1.8 logs the Brocade...CVE-2022-281676.5 Medium
- broadcom sannavIn Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the...CVE-2022-281667.5 High
- brocade sannavAn information exposure through log file vulnerability in Brocade SANNav versions before Brocade...CVE-2022-281615.5 Medium
- broadcom sannavBrocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.CVE-2022-281623.3 Low
- broadcom sannavA vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav...CVE-2022-281658.8 High
- broadcom sannavIn Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management...CVE-2022-281639.8 Critical
- broadcom sannavBrocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm...CVE-2022-281646.5 Medium
- broadcom sannavBrocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and...CVE-2020-153855.4 Medium
- broadcom sannavBrocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful...CVE-2020-153845.3 Medium
- broadcom sannavBrocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level.CVE-2020-153807.5 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition...CVE-2020-153797.5 High
- broadcom sannavThe OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes...CVE-2020-153785.3 Medium
- Show moreLoading…