BS
Product
Brocade SANnav
58
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 7High 20Medium 30Low 1
Watch
Add Brocade SANnav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6392 | 4.4 | Jul 10 | Daily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392) Affected: Brocade SANnav versions before 2.4.0a |
| CVE-2025-6390 | 4.4 | Jul 10 | Cleartext storage of sensitive information in Brocade SANnav server audit logs. Affected: before SANnav 2.4.0a |
| CVE-2025-4662 | 4.4 | Jul 10 | Plaintext security passwords are logged in the audit logs while executing openssl cmd Affected: before SANnav 2.4.0a |
| CVE-2024-10404 | 4.4 | Feb 14 | Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave Affected: before 2.3.1b |
| CVE-2022-43935 | 4.4 | Nov 21 | Switch passwords and authorization IDs are printed in the embedded MLS DB file Affected: before 2.2.2 |
| CVE-2022-43933 | 4.4 | Nov 21 | configuration secrets are logged in support-save Affected: before 2.2.2 |
| CVE-2026-5769 | 4.1 | Oct 8 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the… Affected: before 3.0.1 |
| CVE-2024-29963 | 3.8 | Apr 19 | Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker Affected: before 2.3.0a |