Vulnerabilities in Brocade
151 resultsCVE-2024-29968HIGHSQL Table names, column names, and SQL queries are collected in DR standby SupportsaveEPSS 0.5%CVE-2024-5461HIGHCommand or parameter injection via unique embedded switch SNMP commands.EPSS 0.4%CVE-2026-0869HIGHApplication User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0EPSS 0.4%CVE-2026-94576MEDIUMAn authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions befoEPSS 0.4%CVE-2026-82369HIGHInsufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1aEPSS 0.4%CVE-2024-29965MEDIUMInsecure backupEPSS 0.4%CVE-2026-87671HIGHAn out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated EPSS 0.4%CVE-2026-94578HIGHBrocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and AccountEPSS 0.4%CVE-2026-87668MEDIUMA stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When proEPSS 0.4%CVE-2024-1509HIGHBrocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100EPSS 0.4%CVE-2025-12773HIGHPlain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0aEPSS 0.4%CVE-2026-87679HIGHWhen Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings inEPSS 0.4%CVE-2023-3489HIGHfirmwaredownload command could log servers passwords in clear textEPSS 0.4%CVE-2026-14441MEDIUMLogic flaw in SANnav Java cache key handling object comparison handlingEPSS 0.4%CVE-2026-82368HIGHInsecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to coEPSS 0.3%CVE-2026-85490HIGHWhen Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitiEPSS 0.3%CVE-2024-29960MEDIUMIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)EPSS 0.3%CVE-2024-29950HIGHBrocade SANnav before v2.3.1, v2.3.0a uses weak encryptionEPSS 0.3%CVE-2024-29957HIGHEncryption key is stored in the DR log filesEPSS 0.3%CVE-2024-29953MEDIUMEncoded session passwords on session storage for Virtual Fabric platformsEPSS 0.3%