| CVE-2026-5769 |
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in…
|
5.6
Medium
|
Oct 8, 2026 |
| CVE-2026-5049 |
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a
|
6.9
Medium
|
Oct 8, 2026 |
| CVE-2026-5048 |
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability…
|
6.1
Medium
|
Oct 8, 2026 |
| CVE-2026-5047 |
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log…
|
8.2
High
|
Oct 8, 2026 |
| CVE-2024-4282 |
Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22
|
8.2
High
|
Feb 14, 2025 |
| CVE-2024-10405 |
Brocade SANnav before SANnav 2.3.1b
enables weak TLS ciphers on ports 443 and 18082
|
6.9
Medium
|
Feb 14, 2025 |
| CVE-2024-2240 |
Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing
|
8.6
High
|
Feb 14, 2025 |
| CVE-2025-1053 |
Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and…
|
8.6
High
|
Feb 14, 2025 |
| CVE-2024-10404 |
CalInvocationHandler in Brocade
SANnav before 2.3.1b logs sensitive information in clear text
|
5.5
Medium
|
Feb 14, 2025 |
| CVE-2024-2860 |
The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local…
|
7.8
High
|
May 8, 2024 |
| CVE-2024-2859 |
By default, SANnav OVA is shipped with root user login enabled
|
6.8
Medium
|
Apr 27, 2024 |
| CVE-2024-4173 |
A vulnerability in Brocade SANnav exposes Kafka in the wan interface
|
7.6
High
|
Apr 25, 2024 |
| CVE-2024-4161 |
In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received
clear text
|
8.6
High
|
Apr 25, 2024 |
| CVE-2024-4159 |
Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an…
|
4.3
Medium
|
Apr 25, 2024 |
| CVE-2024-29969 |
When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak…
|
7.5
High
|
Apr 19, 2024 |
| CVE-2024-29968 |
An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances…
|
7.7
High
|
Apr 19, 2024 |
| CVE-2024-29967 |
In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance…
|
4.4
Medium
|
Apr 19, 2024 |
| CVE-2024-29966 |
Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the…
|
7.5
High
|
Apr 19, 2024 |
| CVE-2024-29965 |
In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the…
|
6.8
Medium
|
Apr 19, 2024 |
| CVE-2024-29964 |
Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files
|
5.7
Medium
|
Apr 19, 2024 |
| CVE-2024-29962 |
Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable
|
5.5
Medium
|
Apr 19, 2024 |
| CVE-2024-29963 |
Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker
|
1.9
Low
|
Apr 19, 2024 |
| CVE-2024-29961 |
A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a
|
8.2
High
|
Apr 19, 2024 |
| CVE-2024-29960 |
In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time…
|
6.8
Medium
|
Apr 19, 2024 |
| CVE-2024-29959 |
A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the…
|
8.6
High
|
Apr 19, 2024 |