BS
Product
Brocade SANnav
58
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 7High 20Medium 30Low 1
Watch
Add Brocade SANnav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23302 | 8.8 | Jan 18 | JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration… Affected: All versions, or not specified |
| CVE-2019-16212 | 8.8 | Sep 25 | A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection Affected: before 2.1.0 |
| CVE-2019-16205 | 8.8 | Nov 8 | A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID Affected: before 2.0 |
| CVE-2024-29959 | 8.6 | Apr 19 | Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save Affected: before 2.3.0a |
| CVE-2024-29961 | 8.2 | Apr 19 | supply-chain attack risk Affected: before 2.3.0a |
| CVE-2026-5048 | 8.0 | Oct 8 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious… Affected: before 3.0.0a |
| CVE-2024-2860 | 7.8 | May 8 | The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw Affected: before 2.3.0a; 2.3.1 |
| CVE-2019-16207 | 7.8 | Nov 8 | Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges Affected: before 2.0 |
| CVE-2022-43934 | 7.5 | Nov 21 | Weak Key-exchange algorithms Affected: before 2.2.2 |
| CVE-2024-4161 | 7.5 | Apr 25 | Syslog traffic sent in clear-text Affected: before 2.3.0 |
| CVE-2024-29969 | 7.5 | Apr 19 | TLS/SSL weak message authentication code ciphers are added by default for port 18082 Affected: 2.2.2 before 2.3.0a |
| CVE-2024-29960 | 7.5 | Apr 19 | Identical SSH keys utilized inside the OVA image (CVE-2024-29960) Affected: before 2.3.0a |
| CVE-2024-29957 | 7.5 | Apr 19 | Encryption key is stored in the DR log files Affected: before 2.3.0a |
| CVE-2020-15379 | 7.5 | Jun 9 | Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for… Affected: through 2.1.0 |
| CVE-2019-16208 | 7.5 | Nov 8 | Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords… Affected: before 2.0 |
| CVE-2020-15387 | 7.4 | Jun 9 | The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which… Affected: before 2.1.1 |
| CVE-2019-16209 | 7.4 | Nov 8 | A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets… Affected: before 2.0 |
| CVE-2024-2240 | 7.2 | Feb 14 | Docker implementation in Brocade SANnav is missing Audit Rules. Affected: before 2.3.1b |
| CVE-2024-2859 | 7.2 | Apr 27 | By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859) Affected: before 2.3.0 |
| CVE-2020-15382 | 7.2 | Jun 9 | Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided for PostgreSQL at install-time Affected: before 2.1.1 |
Showing 20