6.1
Medium
CVE-2026-5048 In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability…
Description
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Brocade SANnav 3.0 | earliest → < 3.0.0a | 3.0.0a |
References
- support.broadcom.com support.broadcom.com
Timeline
- Published
- Last modified
Other CVEs of Brocade SANnav
The 34 CVEs of Brocade SANnav →
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in…
5.6
Medium
CVE-2026-5049
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a
6.9
Medium
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log…
8.2
High
CVE-2024-4282
Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22
8.2
High