BS
Product
Brocade SAnnav
34
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 3High 10Medium 20Low 1
Watch
Add Brocade SAnnav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29959 | 8.6 | Apr 19 | Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save Affected: before v2.3.1 and v2.3.0a |
| CVE-2024-29961 | 8.2 | Apr 19 | supply-chain attack risk Affected: before v2.3.1 and v2.3.0a |
| CVE-2026-5048 | 8.0 | Oct 8 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious… Affected: before 3.0.0a |
| CVE-2024-2860 | 7.8 | May 8 | The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw Affected: before SANnav v2.3.0a |
| CVE-2024-4161 | 7.5 | Apr 25 | Syslog traffic sent in clear-text Affected: before v2.3.0 |
| CVE-2024-29969 | 7.5 | Apr 19 | TLS/SSL weak message authentication code ciphers are added by default for port 18082 Affected: before v2.3.1, v2.3.0a |
| CVE-2024-29960 | 7.5 | Apr 19 | Identical SSH keys utilized inside the OVA image (CVE-2024-29960) Affected: before v2.3.1 and v2.3.0a |
| CVE-2024-29957 | 7.5 | Apr 19 | Encryption key is stored in the DR log files Affected: before v2.3.1 and v2.3.0a |
| CVE-2024-2240 | 7.2 | Feb 14 | Docker implementation in Brocade SANnav is missing Audit Rules. Affected: Brocade SANnav before 2.3.1b |
| CVE-2024-2859 | 7.2 | Apr 27 | By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859) Affected: v2.3.0 |
Showing 10