BS
Product
Brocade Sannav
58
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 7High 20Medium 30Low 1
Watch
Add Brocade Sannav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6392 | 4.4 | Jul 10 | Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands Affected: before 2.4.0a |
| CVE-2025-6390 | 4.4 | Jul 10 | Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions Affected: before 2.4.0a |
| CVE-2025-4662 | 4.4 | Jul 10 | Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command… Affected: before 2.4.0a |
| CVE-2024-10404 | 4.4 | Feb 14 | CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text Affected: before 2.3.1b |
| CVE-2022-43935 | 4.4 | Nov 21 | An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are… Affected: before 2.2.2 |
| CVE-2022-43933 | 4.4 | Nov 21 | An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave Affected: before 2.2.2 |
| CVE-2026-5769 | 4.1 | Oct 8 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the… Affected: before 3.0.1 |
| CVE-2024-29963 | 3.8 | Apr 19 | Brocade SANnav OVA before v2.3.1, and v2.3.0a, contain hardcoded TLS keys used by Docker Affected: before 2.3.0a |