FO
Product
Fabric Operating System
On CISA KEVExploited in the wild
146
CVEs
2
On KEV
9.8
Max CVSS
43
New 30D
Severity mix
Critical 11High 68Medium 60Low 6
Watch
Add Fabric Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16204 | 7.5 | Feb 5 | Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an… Affected: before 7.4.2f; 8.1.2 before 8.1.2j; 8.2.1 before 8.2.1d; 8.2.2 before 8.2.2a |
| CVE-2019-16203 | 7.5 | Feb 5 | Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when… Affected: 8.2.1 before 8.2.1d; 8.2.2 before 8.2.2a |
| CVE-2019-19069 | 7.5 | Nov 18 | A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory… Affected: All versions, or not specified |
| CVE-2019-19050 | 7.5 | Nov 18 | A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: All versions, or not specified |
| CVE-2018-6434 | 7.5 | Nov 8 | A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's… Affected: 7.4.2 before 7.4.2d; 8.0.2 before 8.0.2f; 8.1.2 before 8.1.2f; 8.2.0 before 8.2.1 |
| CVE-2020-15387 | 7.4 | Jun 9 | The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which… Affected: before 7.4.2; 8.2.0 before 8.2.1; 7.4.2; 7.4.2a; 7.4.2b; 7.4.2c; +6 more |
| CVE-2020-15778 | 7.4 | Jul 24 | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument Affected: All versions, or not specified |
| CVE-2026-87687 | 7.3 | Oct 8 | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2023-38709 | 7.3 | Apr 4 | Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses Affected: All versions, or not specified |
| CVE-2026-87673 | 7.2 | Oct 8 | An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2026-87679 | 7.2 | Oct 8 | When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays… Affected: before 10.0.1 |
| CVE-2025-58383 | 7.2 | Feb 3 | Privilege escalation via bind command in Brocade Fabric OS Affected: before 9.2.1c2; 9.2.2 before 9.2.2b |
| CVE-2025-58382 | 7.2 | Feb 3 | Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a Affected: before 9.2.1c2; 9.2.2 before 9.2.2b |
| CVE-2022-33178 | 7.2 | Oct 25 | A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch Affected: before 9.0.0 |
| CVE-2026-87660 | 7.1 | Oct 8 | An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… Affected: before 9.2.2d; 10.0.0 before 10.0.1 |
| CVE-2024-7516 | 7.1 | Nov 12 | A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's… Affected: before 9.2.2 |
| CVE-2020-13630 | 7.0 | May 27 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature Affected: All versions, or not specified |
| CVE-2019-18683 | 7.0 | Nov 4 | An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8 Affected: All versions, or not specified |