agentprime: brocade-sannavEvery new CVE for brocade-sannav.https://agentprime.io/CVE-2026-5769: Brocade SANnav: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch…https://agentprime.io/advisories/CVE-2026-5769/https://agentprime.io/advisories/CVE-2026-5769/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 06:07:03 GMTCVECVE-2026-5049: Path traversal in Brocade SANnavhttps://agentprime.io/advisories/CVE-2026-5049/https://agentprime.io/advisories/CVE-2026-5049/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 05:29:14 GMTCVECVE-2026-5048: SQL injection in Brocade SANnavhttps://agentprime.io/advisories/CVE-2026-5048/https://agentprime.io/advisories/CVE-2026-5048/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 05:23:56 GMTCVECVE-2026-5047: Insecure storage of sensitive information in Brocade SANnavhttps://agentprime.io/advisories/CVE-2026-5047/https://agentprime.io/advisories/CVE-2026-5047/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 05:18:55 GMTCVECVE-2026-85417: Incomplete property masking in the SANnav logging subsystemhttps://agentprime.io/advisories/CVE-2026-85417/https://agentprime.io/advisories/CVE-2026-85417/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 00:03:17 GMTCVECVE-2026-14441: Logic flaw in SANnav Java cache key handling object comparison handlinghttps://agentprime.io/advisories/CVE-2026-14441/https://agentprime.io/advisories/CVE-2026-14441/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 20:58:52 GMTCVECVE-2026-14442: Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1ahttps://agentprime.io/advisories/CVE-2026-14442/https://agentprime.io/advisories/CVE-2026-14442/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 20:40:10 GMTCVECVE-2026-14443: Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1ahttps://agentprime.io/advisories/CVE-2026-14443/https://agentprime.io/advisories/CVE-2026-14443/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 20:06:28 GMTCVECVE-2026-82372: Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.ahttps://agentprime.io/advisories/CVE-2026-82372/https://agentprime.io/advisories/CVE-2026-82372/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:08:43 GMTCVECVE-2026-82371: Plaintext exposure of sensitive authentication data in SANnav discovery service log fileshttps://agentprime.io/advisories/CVE-2026-82371/https://agentprime.io/advisories/CVE-2026-82371/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 18:20:10 GMTCVECVE-2026-82370: Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP servicehttps://agentprime.io/advisories/CVE-2026-82370/https://agentprime.io/advisories/CVE-2026-82370/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 23:38:48 GMTCVECVE-2026-82369: Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1ahttps://agentprime.io/advisories/CVE-2026-82369/https://agentprime.io/advisories/CVE-2026-82369/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:45:24 GMTCVECVE-2026-82368: Improper access control in Brocade SANnavhttps://agentprime.io/advisories/CVE-2026-82368/https://agentprime.io/advisories/CVE-2026-82368/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 18:40:05 GMTCVECVE-2025-12774: SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0https://agentprime.io/advisories/CVE-2025-12774/https://agentprime.io/advisories/CVE-2025-12774/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 01:28:43 GMTCVECVE-2025-12773: Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0ahttps://agentprime.io/advisories/CVE-2025-12773/https://agentprime.io/advisories/CVE-2025-12773/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 00:38:08 GMTCVECVE-2025-12772: Plaintext Switch admin login password is seen in Brocade SANnav support savehttps://agentprime.io/advisories/CVE-2025-12772/https://agentprime.io/advisories/CVE-2025-12772/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 22:41:13 GMTCVECVE-2025-12679: Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0https://agentprime.io/advisories/CVE-2025-12679/https://agentprime.io/advisories/CVE-2025-12679/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 21:41:16 GMTCVECVE-2025-12680: Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680)https://agentprime.io/advisories/CVE-2025-12680/https://agentprime.io/advisories/CVE-2025-12680/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 20:50:29 GMTCVECVE-2024-4282: Weak TLS Ciphers on Brocade SANnav OVA SSH port 22https://agentprime.io/advisories/CVE-2024-4282/https://agentprime.io/advisories/CVE-2024-4282/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Feb 2025 23:33:06 GMTCVECVE-2024-10405: Weak TLS Ciphers on Brocade SANnav port 443 & 18082https://agentprime.io/advisories/CVE-2024-10405/https://agentprime.io/advisories/CVE-2024-10405/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Feb 2025 23:23:18 GMTCVECVE-2024-2240: Docker implementation in Brocade SANnav is missing Audit Rules.https://agentprime.io/advisories/CVE-2024-2240/https://agentprime.io/advisories/CVE-2024-2240/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Feb 2025 04:53:11 GMTCVECVE-2025-1053: Brocade SANnav encryption key is logged in the debug logshttps://agentprime.io/advisories/CVE-2025-1053/https://agentprime.io/advisories/CVE-2025-1053/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Feb 2025 03:47:35 GMTCVECVE-2024-10404: Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsavehttps://agentprime.io/advisories/CVE-2024-10404/https://agentprime.io/advisories/CVE-2024-10404/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Feb 2025 03:13:19 GMTCVECVE-2022-43937: Brocade SANnav Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2022-43937/https://agentprime.io/advisories/CVE-2022-43937/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 03:26:58 GMTCVECVE-2022-43936: Brocade Fabric OS switch passwords when debugging is enabledhttps://agentprime.io/advisories/CVE-2022-43936/https://agentprime.io/advisories/CVE-2022-43936/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 03:04:52 GMTCVECVE-2022-43935: Switch passwords and authorization IDs are printed in the embedded MLS DB filehttps://agentprime.io/advisories/CVE-2022-43935/https://agentprime.io/advisories/CVE-2022-43935/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 01:51:59 GMTCVECVE-2022-43934: Weak Key-exchange algorithmshttps://agentprime.io/advisories/CVE-2022-43934/https://agentprime.io/advisories/CVE-2022-43934/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 01:43:54 GMTCVECVE-2022-43933: configuration secrets are logged in support-savehttps://agentprime.io/advisories/CVE-2022-43933/https://agentprime.io/advisories/CVE-2022-43933/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 01:36:30 GMTCVECVE-2024-2860: Missing authentication in Brocade SAnnavhttps://agentprime.io/advisories/CVE-2024-2860/https://agentprime.io/advisories/CVE-2024-2860/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 May 2024 01:01:54 GMTCVECVE-2024-2859: By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)https://agentprime.io/advisories/CVE-2024-2859/https://agentprime.io/advisories/CVE-2024-2859/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 Apr 2024 00:06:10 GMTCVECVE-2024-4173: SANnav versions exposes Kafka in the wan interface.https://agentprime.io/advisories/CVE-2024-4173/https://agentprime.io/advisories/CVE-2024-4173/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Apr 2024 07:30:44 GMTCVECVE-2024-4161: Syslog traffic sent in clear-texthttps://agentprime.io/advisories/CVE-2024-4161/https://agentprime.io/advisories/CVE-2024-4161/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Apr 2024 02:32:08 GMTCVECVE-2024-4159: Protection mechanismshttps://agentprime.io/advisories/CVE-2024-4159/https://agentprime.io/advisories/CVE-2024-4159/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Apr 2024 01:58:17 GMTCVECVE-2024-29969: TLS/SSL weak message authentication code ciphers are added by default for port 18082https://agentprime.io/advisories/CVE-2024-29969/https://agentprime.io/advisories/CVE-2024-29969/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 05:24:44 GMTCVECVE-2024-29968: SQL Table names, column names, and SQL queries are collected in DR standby Supportsavehttps://agentprime.io/advisories/CVE-2024-29968/https://agentprime.io/advisories/CVE-2024-29968/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 05:17:57 GMTCVECVE-2024-29967: In Brocade SANnav before v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount pointshttps://agentprime.io/advisories/CVE-2024-29967/https://agentprime.io/advisories/CVE-2024-29967/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 05:06:45 GMTCVECVE-2024-29966: hard-coded credentials in the documentation that appear as the appliance root passwordhttps://agentprime.io/advisories/CVE-2024-29966/https://agentprime.io/advisories/CVE-2024-29966/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 04:53:59 GMTCVECVE-2024-29965: Insecure backuphttps://agentprime.io/advisories/CVE-2024-29965/https://agentprime.io/advisories/CVE-2024-29965/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 04:48:46 GMTCVECVE-2024-29964: Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker fileshttps://agentprime.io/advisories/CVE-2024-29964/https://agentprime.io/advisories/CVE-2024-29964/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 04:39:17 GMTCVECVE-2024-29962: Insecure file permission setting that makes files world-readablehttps://agentprime.io/advisories/CVE-2024-29962/https://agentprime.io/advisories/CVE-2024-29962/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 04:15:43 GMTCVECVE-2024-29963: Brocade SANnav contains hardcoded TLS keys used by Dockerhttps://agentprime.io/advisories/CVE-2024-29963/https://agentprime.io/advisories/CVE-2024-29963/CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 04:04:48 GMTCVECVE-2024-29961: supply-chain attack riskhttps://agentprime.io/advisories/CVE-2024-29961/https://agentprime.io/advisories/CVE-2024-29961/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 03:59:25 GMTCVECVE-2024-29960: Identical SSH keys utilized inside the OVA image (CVE-2024-29960)https://agentprime.io/advisories/CVE-2024-29960/https://agentprime.io/advisories/CVE-2024-29960/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 03:30:51 GMTCVECVE-2024-29959: Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support savehttps://agentprime.io/advisories/CVE-2024-29959/https://agentprime.io/advisories/CVE-2024-29959/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 03:19:28 GMTCVECVE-2024-29958: Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.https://agentprime.io/advisories/CVE-2024-29958/https://agentprime.io/advisories/CVE-2024-29958/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 03:15:32 GMTCVECVE-2024-29957: Encryption key is stored in the DR log fileshttps://agentprime.io/advisories/CVE-2024-29957/https://agentprime.io/advisories/CVE-2024-29957/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Apr 2024 03:11:25 GMTCVECVE-2024-29956: cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnavhttps://agentprime.io/advisories/CVE-2024-29956/https://agentprime.io/advisories/CVE-2024-29956/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Apr 2024 01:00:49 GMTCVECVE-2024-29955: Insertion of Sensitive Information into Brocade SANnav Log Filehttps://agentprime.io/advisories/CVE-2024-29955/https://agentprime.io/advisories/CVE-2024-29955/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 22:11:51 GMTCVECVE-2024-29952: Clear text storage of sensistive information by manipulating command variableshttps://agentprime.io/advisories/CVE-2024-29952/https://agentprime.io/advisories/CVE-2024-29952/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 21:43:57 GMTCVECVE-2024-29951: Brocade SANnav has weak encryption in internal SSH portshttps://agentprime.io/advisories/CVE-2024-29951/https://agentprime.io/advisories/CVE-2024-29951/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 19:21:32 GMTCVE