BF
Product
Brocade Fabric Operating System
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 7Low 0
Watch
Add Brocade Fabric Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31432 | 7.8 | Aug 2 | Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in… Affected: before 9.1.1c |
| CVE-2020-12243 | 7.5 | Apr 28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) Affected: All versions, or not specified |
| CVE-2023-31926 | 7.1 | Aug 2 | System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 Affected: before 9.1.1c |
| CVE-2021-23133 | 7.0 | Apr 22 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged… Affected: All versions, or not specified |
| CVE-2023-31928 | 6.1 | Aug 2 | A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a… Affected: before 9.2.0 |
| CVE-2020-1927 | 6.1 | Apr 2 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to… Affected: All versions, or not specified |
| CVE-2023-31431 | 5.5 | Aug 2 | A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric… Affected: before 9.1.1c; 9.2.0 |
| CVE-2023-31430 | 5.5 | Aug 2 | A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash… Affected: before 9.1.1c; 9.2.0 |
| CVE-2023-31428 | 5.5 | Aug 2 | Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory… Affected: before 9.1.1c; 9.2.0 |
| CVE-2020-35507 | 5.5 | Jan 4 | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be… Affected: All versions, or not specified |
| CVE-2023-31927 | 5.3 | Aug 2 | An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get… Affected: before 9.1.1c |
Showing 11