| CVE-2026-85417 |
Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be…
|
6.4
Medium
|
Sep 25, 2026 |
| CVE-2026-14441 |
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when…
|
6.9
Medium
|
Sep 24, 2026 |
| CVE-2026-14442 |
An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be…
|
6.9
Medium
|
Sep 24, 2026 |
| CVE-2026-14443 |
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit…
|
8.4
High
|
Sep 24, 2026 |
| CVE-2026-82372 |
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before…
|
8.5
High
|
Sep 24, 2026 |
| CVE-2026-82371 |
Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables individuals…
|
8.5
High
|
Sep 24, 2026 |
| CVE-2026-82370 |
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent…
|
8.6
High
|
Sep 23, 2026 |
| CVE-2026-82369 |
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits…
|
8.6
High
|
Sep 23, 2026 |
| CVE-2026-82368 |
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local,…
|
8.7
High
|
Sep 23, 2026 |
| CVE-2025-12774 |
A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries…
|
4.6
Medium
|
Feb 3, 2026 |
| CVE-2025-12773 |
A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the…
|
7.1
High
|
Feb 3, 2026 |
| CVE-2025-12772 |
Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs
|
8.5
High
|
Feb 2, 2026 |
| CVE-2025-12679 |
A vulnerability in Brocade SANnav before 2.4.0b prints the Password-Based Encryption (PBE) key in plaintext in the…
|
7.1
High
|
Feb 2, 2026 |
| CVE-2025-12680 |
Brocade SANnav before Brocade SANnav 2.4.0b logs database passwords in clear text in the standby SANnav server, after…
|
6.0
Medium
|
Feb 2, 2026 |
| CVE-2022-43937 |
Possible information exposure through log file vulnerability where sensitive fields are recorded in the debug-enabled…
|
5.7
Medium
|
Nov 21, 2024 |
| CVE-2022-43936 |
Brocade SANnav versions before 2.2.2 log Brocade Fabric OS switch passwords when debugging is enabled
|
6.8
Medium
|
Nov 21, 2024 |
| CVE-2022-43935 |
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where…
|
5.3
Medium
|
Nov 21, 2024 |
| CVE-2022-43934 |
Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24,…
|
6.5
Medium
|
Nov 21, 2024 |
| CVE-2022-43933 |
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where…
|
4.4
Medium
|
Nov 21, 2024 |
| CVE-2024-2860 |
The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local…
|
7.8
High
|
May 8, 2024 |
| CVE-2024-4173 |
A vulnerability in Brocade SANnav exposes Kafka in the wan interface
|
7.6
High
|
Apr 25, 2024 |
| CVE-2024-29969 |
When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak…
|
7.5
High
|
Apr 19, 2024 |
| CVE-2024-29967 |
In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance…
|
4.4
Medium
|
Apr 19, 2024 |
| CVE-2024-29966 |
Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the…
|
7.5
High
|
Apr 19, 2024 |
| CVE-2024-29965 |
In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the…
|
6.8
Medium
|
Apr 19, 2024 |