SA
Product
Sannav
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 10Low 1
Watch
Add Sannav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-28163 | 9.8 | May 6 | In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL… Affected: before 2.2.0 |
| CVE-2020-15377 | 9.8 | Jun 9 | Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly referred to as… Affected: before 2.1.1 |
| CVE-2022-28165 | 8.8 | May 6 | A vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav before 2.2.0 could allow an authenticated, remote attacker to access resources that… Affected: before 2.2.0 |
| CVE-2025-12774 | 7.5 | Feb 3 | A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access… Affected: before 3.0 |
| CVE-2022-28168 | 7.5 | Jun 27 | In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to… Affected: before 2.1.1.8; 2.2.0.0 before 2.2.0.2 |
| CVE-2022-28166 | 7.5 | Jun 27 | In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers… Affected: before 2.1.1.8; 2.2.0.0 before 2.2.0.2 |
| CVE-2020-15380 | 7.5 | Jun 9 | Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level Affected: before 2.1.1 |
| CVE-2020-15381 | 7.5 | Jun 9 | Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials of the jmx server Affected: before 2.1.1 |
| CVE-2022-2068 | 7.3 | Jun 21 | The c_rehash script allows command injection Affected: All versions, or not specified |
| CVE-2025-12773 | 6.5 | Feb 3 | A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit… Affected: before 2.4.0a |
| CVE-2025-12679 | 6.5 | Feb 2 | A vulnerability in Brocade SANnav before 2.4.0b prints the Password-Based Encryption (PBE) key in plaintext in the system audit log file Affected: before 2.4.0b |
| CVE-2022-28167 | 6.5 | Jun 27 | Brocade SANnav before Brocade SANvav v Affected: before 2.1.1.8; 2.2.0.0 before 2.2.0.2 |
| CVE-2022-28164 | 6.5 | May 6 | Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords Affected: before 2.2.0 |
| CVE-2020-13401 | 6.0 | Jun 2 | An issue was discovered in Docker Engine before 19.03.11 Affected: All versions, or not specified |
| CVE-2020-15385 | 5.4 | Jun 9 | Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission Affected: before 2.1.1 |
| CVE-2020-15384 | 5.3 | Jun 9 | Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability Affected: before 2.1.1 |
| CVE-2020-15378 | 5.3 | Jun 9 | The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface Affected: before 2.1.1 |
| CVE-2025-12772 | 4.9 | Feb 2 | Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Switch admin password on the SANnav support save logs Affected: before 2.4.0b |
| CVE-2025-12680 | 4.9 | Feb 2 | Brocade SANnav before Brocade SANnav 2.4.0b logs database passwords in clear text in the standby SANnav server, after disaster recovery failover Affected: before 2.4.0b |
| CVE-2022-28162 | 3.3 | May 9 | Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text Affected: before 2.2.0 |
Showing 20