SA
Product
SANnav
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 14Medium 20Low 1
Watch
Add SANnav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14441 | 6.9 | Sep 24 | Logic flaw in SANnav Java cache key handling object comparison handling Affected: before 3.1.0a |
| CVE-2026-14442 | 6.9 | Sep 24 | Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a Affected: before 3.1.0a |
| CVE-2025-12773 | 6.5 | Feb 3 | Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a Affected: before 2.4.0a |
| CVE-2025-12679 | 6.5 | Feb 2 | Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0 Affected: SANnav before 2.4.0b |
| CVE-2024-29964 | 6.5 | Apr 19 | Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files Affected: before 2.3.0a |
| CVE-2024-29958 | 6.5 | Apr 19 | Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. Affected: before 2.3.0a |
| CVE-2026-85417 | 6.4 | Sep 25 | Incomplete property masking in the SANnav logging subsystem Affected: before 3.1.0a |
| CVE-2024-29967 | 6.0 | Apr 19 | In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points Affected: before 2.3.1; before 2.3.0a |
| CVE-2024-29965 | 5.9 | Apr 19 | Insecure backup Affected: before 2.3.0a |
| CVE-2024-29951 | 5.7 | Apr 17 | Brocade SANnav has weak encryption in internal SSH ports Affected: before 2.3.0a |
| CVE-2022-43937 | 5.5 | Nov 21 | Brocade SANnav Information Disclosure Vulnerability Affected: Brocade SANnav before v2.3.0 and 2.2.2a |
| CVE-2024-29962 | 5.5 | Apr 19 | Insecure file permission setting that makes files world-readable Affected: before 2.3.0a |
| CVE-2024-29955 | 5.5 | Apr 17 | Insertion of Sensitive Information into Brocade SANnav Log File Affected: *2.3.1 |
| CVE-2024-29952 | 5.5 | Apr 17 | Clear text storage of sensistive information by manipulating command variables Affected: before 2.3.0a |
| CVE-2023-31423 | 5.5 | Aug 31 | Possible information exposure through log file vulnerability Affected: Brocade SANnav before v2.3.0 and 2.2.2a |
| CVE-2022-28161 | 5.5 | May 9 | An information exposure through log file vulnerability in Brocade SANNav versions before Brocade SANnav 2.2.0 could allow an authenticated, local attacker to view sensitive… Affected: before 2.2.0 |
| CVE-2025-12772 | 4.9 | Feb 2 | Plaintext Switch admin login password is seen in Brocade SANnav support save Affected: before 2.4.0b |
| CVE-2025-12680 | 4.9 | Feb 2 | Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680) Affected: before Brocade SANnav 2.4.0b |
| CVE-2022-43936 | 4.9 | Nov 21 | Brocade Fabric OS switch passwords when debugging is enabled Affected: before Brocade SANnav 2.2.2 |
| CVE-2022-43933 | 4.4 | Nov 21 | configuration secrets are logged in support-save Affected: before Brocade SANnav 2.2.2 |
Showing 20
