Vulnerabilidades em Brocade

151 resultados
Análise Vexday

Com 81 CVEs catalogadas e nenhuma surgida nos últimos 90 dias, o perfil histórico da Brocade apresenta volume moderado, mas a taxa de exploração ativa merece atenção: 1,23% das CVEs constam no catálogo KEV da CISA, o que representa 2,7 vezes a média geral do catálogo — indicador de que vulnerabilidades nesse ecossistema têm histórico desproporcional de aproveitamento real. A CVE mais perigosa em exploração ativa no momento é CVE-2025-1976, com score EPSS de 0,0074, e embora não haja CVEs de severidade crítica nem provas de conceito públicas conhecidas no conjunto atual, a ausência desses fatores não neutraliza o risco dado o padrão de exploração observado. O tipo de falha mais comum, CWE-312 (armazenamento de informações sensíveis em texto claro), sugere atenção a controles de proteção de dados em repouso e em trânsito em implantações Brocade. Equipes de segurança devem priorizar a verificação do status de CVE-2025-1976 em seus ambientes, mesmo diante do EPSS relativamente baixo, considerando o histórico elevado de exploração ativa do vendor.

CVE-2026-5048MEDIUMIn Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authEPSS 0.2%CVE-2023-31423MEDIUMPossible information exposure through log file vulnerabilityEPSS 0.2%CVE-2021-27798—privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xEPSS 0.2%CVE-2026-85421HIGHA critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce autEPSS 0.2%CVE-2022-43935MEDIUMSwitch passwords and authorization IDs are printed in the embedded MLS DB fileEPSS 0.2%CVE-2026-0383HIGHInformation disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0EPSS 0.2%CVE-2023-31429MEDIUMMultiple commands print sensitive information in the terminalEPSS 0.2%CVE-2026-85489HIGHAn authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue dirEPSS 0.2%CVE-2023-31427HIGHKnowledge of full path nameEPSS 0.2%CVE-2026-87687HIGHAn authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An autheEPSS 0.2%CVE-2025-4661MEDIUMPath transversal vulnerability potentially leading to sensitive information disclosureEPSS 0.2%CVE-2024-10405MEDIUMWeak TLS Ciphers on Brocade SANnav port 443 & 18082EPSS 0.2%CVE-2026-87678MEDIUMAn input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. WhEPSS 0.2%CVE-2025-58381MEDIUMDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commandsEPSS 0.2%CVE-2025-58380MEDIUMDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep commandEPSS 0.2%CVE-2025-12774MEDIUMSQL queries with sensitive information printed in logs with Brocade SANnav before 3.0EPSS 0.2%CVE-2026-87681HIGHAn Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions beforeEPSS 0.2%CVE-2026-5047HIGHA vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerabilitEPSS 0.2%CVE-2026-87661MEDIUMBrocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup orEPSS 0.2%CVE-2026-85417MEDIUMIncomplete property masking in the SANnav logging subsystemEPSS 0.2%