Skip to content
Brocade Sannav vulnerabilities
-
broadcom brocade sannav, brocade sannav +1 more
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin...
CVE-2026-5769
5.6 Medium
-
broadcom brocade sannav, brocade sannav +1 more
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav...
CVE-2026-5049
6.9 Medium
-
broadcom brocade sannav, brocade sannav +1 more
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...
CVE-2026-5048
6.1 Medium
-
broadcom brocade sannav, brocade sannav +1 more
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...
CVE-2026-5047
8.2 High
-
brocade sannav
Incomplete property masking in the SANnav logging subsystem
CVE-2026-85417
6.4 Medium
-
brocade sannav
Logic flaw in SANnav Java cache key handling object comparison handling
CVE-2026-14441
6.9 Medium
-
brocade sannav
Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a
CVE-2026-14442
6.9 Medium
-
brocade sannav
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a
CVE-2026-14443
8.4 High
-
brocade sannav
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
CVE-2026-82372
8.5 High
-
brocade sannav
Plaintext exposure of sensitive authentication data in SANnav discovery service log files
CVE-2026-82371
8.5 High
-
brocade sannav
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service
CVE-2026-82370
8.6 High
-
brocade sannav
Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a
CVE-2026-82369
8.6 High
-
brocade sannav
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow...
CVE-2026-82368
8.7 High
-
broadcom sannav
SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0
CVE-2025-12774
4.6 Medium
-
broadcom sannav
Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a
CVE-2025-12773
7.1 High
-
broadcom sannav
Plaintext Switch admin login password is seen in Brocade SANnav support save
CVE-2025-12772
8.5 High
-
broadcom sannav
Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0
CVE-2025-12679
7.1 High
-
broadcom sannav
Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)
CVE-2025-12680
6.0 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)
CVE-2025-6392
6.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Cleartext storage of sensitive information in Brocade SANnav server audit logs.
CVE-2025-6390
5.1 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Plaintext security passwords are logged in the audit logs while executing openssl cmd
CVE-2025-4662
5.1 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Weak TLS Ciphers on Brocade SANnav OVA SSH port 22
CVE-2024-4282
8.2 High
-
broadcom brocade sannav, brocade sannav +1 more
Weak TLS Ciphers on Brocade SANnav port 443 & 18082
CVE-2024-10405
6.9 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Docker implementation in Brocade SANnav is missing Audit Rules.
CVE-2024-2240
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav encryption key is logged in the debug logs
CVE-2025-1053
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave
CVE-2024-10404
5.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav Information Disclosure Vulnerability
CVE-2022-43937
5.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade Fabric OS switch passwords when debugging is enabled
CVE-2022-43936
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Switch passwords and authorization IDs are printed in the embedded MLS DB file
CVE-2022-43935
5.3 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Weak Key-exchange algorithms
CVE-2022-43934
6.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
configuration secrets are logged in support-save
CVE-2022-43933
4.4 Medium
-
broadcom brocade sannav, brocade sannav +1 more
The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an...
CVE-2024-2860
7.8 High
-
brocade sannav, broadcom brocade sannav +1 more
By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)
CVE-2024-2859
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
SANnav versions exposes Kafka in the wan interface.
CVE-2024-4173
7.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Syslog traffic sent in clear-text
CVE-2024-4161
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Protection mechanisms
CVE-2024-4159
4.3 Medium
-
broadcom brocade sannav, brocade sannav +1 more
TLS/SSL weak message authentication code ciphers are added by default for port 18082
CVE-2024-29969
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
SQL Table names, column names, and SQL queries are collected in DR standby Supportsave
CVE-2024-29968
7.7 High
-
broadcom brocade sannav, brocade sannav +1 more
In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points
CVE-2024-29967
4.4 Medium
-
broadcom brocade sannav, brocade sannav +1 more
hard-coded credentials in the documentation that appear as the appliance root password
CVE-2024-29966
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
Insecure backup
CVE-2024-29965
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
CVE-2024-29964
5.7 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Insecure file permission setting that makes files world-readable
CVE-2024-29962
5.5 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade SANnav contains hardcoded TLS keys used by Docker
CVE-2024-29963
1.9 Low
-
broadcom brocade sannav, brocade sannav +1 more
supply-chain attack risk
CVE-2024-29961
8.2 High
-
broadcom brocade sannav, brocade sannav +1 more
Identical SSH keys utilized inside the OVA image (CVE-2024-29960)
CVE-2024-29960
6.8 Medium
-
broadcom brocade sannav, brocade sannav +1 more
Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save
CVE-2024-29959
8.6 High
-
broadcom brocade sannav, brocade sannav +1 more
Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.
CVE-2024-29958
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
Encryption key is stored in the DR log files
CVE-2024-29957
7.5 High
-
broadcom brocade sannav, brocade sannav +1 more
cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav
CVE-2024-29956
6.5 Medium
- Show olderLoading…