Brocade Sannav (Brocade) - vulnerabilities (CVEs)

34 CVEs, 4 in the last 30 days, 3 known versions, newest CVE from 2026-10-08. Vendor: Brocade.

CVEs of Brocade Sannav

• CVE-2026-5769 - CVSS 5.6 (medium), 2026-10-08: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…
• CVE-2026-5049 - CVSS 6.9 (medium), 2026-10-08: A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an…
• CVE-2026-5048 - CVSS 8 (high), 2026-10-08: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker…
• CVE-2026-5047 - CVSS 8.2 (high), 2026-10-08: A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an…
• CVE-2024-10405 - CVSS 6.9 (medium), 2025-02-15: Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data…
• CVE-2024-4282 - CVSS 9.8 (critical), 2025-02-15: Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22.
• CVE-2024-2240 - CVSS 8.6 (high), 2025-02-14: Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various…
• CVE-2025-1053 - CVSS 8.6 (high), 2025-02-14: Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav…
• CVE-2024-10404 - CVSS 5.5 (medium), 2025-02-14: CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker…
• CVE-2024-2860 - CVSS 7.8 (high), 2024-05-08: The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker accessing the VM…
• CVE-2024-2859 - CVSS 7.2 (high), 2024-04-27: By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should…
• CVE-2024-4173 - CVSS 9.8 (critical), 2024-04-25: A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability could allow an unauthenticated attacker to perform various attacks,…
• CVE-2024-4161 - CVSS 8.6 (high), 2024-04-25: In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. This could allow an unauthenticated, remote attacker to capture sensitive…
• CVE-2024-4159 - CVSS 5.3 (medium), 2024-04-25: Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an unauthenticated attacker to sniff the SANnav…
• CVE-2024-29969 - CVSS 7.5 (high), 2024-04-19: When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak message authentication code ciphers are added…
• CVE-2024-29968 - CVSS 7.7 (high), 2024-04-19: An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery…
• CVE-2024-29965 - CVSS 6.8 (medium), 2024-04-19: In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The…
• CVE-2024-29964 - CVSS 6.5 (medium), 2024-04-19: Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the…
• CVE-2024-29967 - CVSS 6 (medium), 2024-04-19: In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing…
• CVE-2024-29966 - CVSS 9.8 (critical), 2024-04-19: Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The…
• CVE-2024-29962 - CVSS 5.5 (medium), 2024-04-19: Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without…
• CVE-2024-29959 - CVSS 8.6 (high), 2024-04-19: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support…
• CVE-2024-29963 - CVSS 3.8 (low), 2024-04-19: Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker. Note: Brocade SANnav doesn't have access to remote Docker registries.
• CVE-2024-29961 - CVSS 8.2 (high), 2024-04-19: A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular…
• CVE-2024-29960 - CVSS 7.5 (high), 2024-04-19: In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade…
• CVE-2024-29958 - CVSS 7.5 (high), 2024-04-19: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the encryption key in the console when a privileged user executes the script to replace the…
• CVE-2024-29957 - CVSS 7.5 (high), 2024-04-19: When Brocade SANnav before v2.3.1 and v2.3.0a servers are configured in Disaster Recovery mode, the encryption key is stored in the DR log files. This could…
• CVE-2024-29956 - CVSS 6.5 (medium), 2024-04-18: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a prints the Brocade SANnav password in clear text in supportsave logs when a user schedules a…
• CVE-2024-29955 - CVSS 5.5 (medium), 2024-04-17: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. This…
• CVE-2024-29952 - CVSS 5.5 (medium), 2024-04-17: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in…
• CVE-2024-29951 - CVSS 5.7 (medium), 2024-04-17: Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection.
• CVE-2024-29950 - CVSS 7.5 (high), 2024-04-17: The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash. The vulnerability…
• CVE-2023-31925 - CVSS 6.5 (medium), 2023-08-31: Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with…
• CVE-2022-33187 - CVSS 5.5 (medium), 2022-12-09: Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs. The vulnerability could allow an attacker with admin privilege to…