Brocade
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 70
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/09/2026, Brocade recorded 70 security vulnerabilities in the last 90 days across 5 products, including 43 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Fabric OS had the most security vulnerabilities in the Brocade ecosystem, with 43 vulnerabilities—approximately 61.43% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2024-5460Brocade Fabric OS versions prior to v9.0 have default community stringsCVE-2024-29954password management API prints sensitive information in log filesCVE-2024-29953Encoded session passwords on session storage for Virtual Fabric platformsCVE-2024-2860CVE-2024-2860CVE-2024-2859By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2024-5460Brocade Fabric OS versions prior to v9.0 have default community strings | Exploitation statusNot exploited | FixNo |
| Published06/25/2024 |
| SeverityHigh |
CVE-2024-29954password management API prints sensitive information in log files | Exploitation statusNot exploited | FixYes | Affected productFabric OS | Published06/25/2024 | SeverityMedium |
|---|
CVE-2024-29953Encoded session passwords on session storage for Virtual Fabric platforms | Exploitation statusNot exploited | FixYes | Affected productFabric OS | Published06/25/2024 | SeverityMedium |
|---|
CVE-2024-2860CVE-2024-2860 | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published05/08/2024 | SeverityHigh |
|---|
CVE-2024-2859By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859) | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/27/2024 | SeverityMedium |
|---|
CVE-2024-4173SANnav versions exposes Kafka in the wan interface. | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/25/2024 | SeverityHigh |
|---|
CVE-2024-4161Syslog traffic sent in clear-text | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/25/2024 | SeverityHigh |
|---|
CVE-2024-4159Protection mechanisms | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/25/2024 | SeverityMedium |
|---|
CVE-2024-29969TLS/SSL weak message authentication code ciphers are added by default for port 18082 | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29968SQL Table names, column names, and SQL queries are collected in DR standby Supportsave | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29967Insecure Docker mount points in Brocade SANnav expose sensitive files | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29966hard-coded credentials in the documentation that appear as the appliance root password | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29965Insecure backup | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29964Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29963Brocade SANnav contains hardcoded TLS keys used by Docker | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityLow |
|---|
CVE-2024-29962Insecure file permission setting that makes files world-readable | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29961supply-chain attack risk | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29960Identical SSH keys utilized inside the OVA image (CVE-2024-29960) | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29959Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29958Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29957Encryption key is stored in the DR log files | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29956cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-29955Insertion of Sensitive Information into Brocade SANnav Log File | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-29952Clear text storage of sensistive information by manipulating command variables | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-29951Brocade SANnav has weak encryption in internal SSH ports | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-29950Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published04/17/2024 | SeverityHigh |
|---|
CVE-2023-5973Truncated port name | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published04/05/2024 | SeverityMedium |
|---|
CVE-2023-3454CVE-2023-3454 | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published04/04/2024 | SeverityHigh |
|---|
CVE-2021-27795License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, | Exploitation statusNot confirmed | FixNo | Affected productBrocade Switches | Published12/06/2023 | SeverityMedium |
|---|
CVE-2023-4163Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS | Exploitation statusNot exploited | FixNo | Affected productBrocade Fabric OS | Published08/31/2023 | SeverityMedium |
|---|
CVE-2023-4162Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0 | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/31/2023 | SeverityMedium |
|---|
CVE-2023-31925Storage of clear text password in Brocade SANnav | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published08/31/2023 | SeverityMedium |
|---|
CVE-2023-31424Web authentication and authorization bypass | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published08/31/2023 | SeverityHigh |
|---|
CVE-2023-31423Possible information exposure through log file vulnerability | Exploitation statusNot exploited | FixNo | Affected productSANnav | Published08/31/2023 | SeverityMedium |
|---|
CVE-2023-3489firmwaredownload command could log servers passwords in clear text | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/30/2023 | SeverityHigh |
|---|
CVE-2023-31927An information disclosure in the web interface of Brocade Fabric OS | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/02/2023 | SeverityMedium |
|---|
CVE-2023-31926Arbitrary File Overwrite using less command | Exploitation statusNot confirmed | FixNo | Affected productFabric OS | Published08/02/2023 | SeverityHigh |
|---|
CVE-2023-31928XSS vulnerability in Brocade Webtools | Exploitation statusNot confirmed | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31432Privilege issues in multiple commands | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityHigh |
|---|
CVE-2023-31431A buffer overflow vulnerability in “diagstatus” command | Exploitation statusNot confirmed | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31430buffer overflow vulnerability in “secpolicydelete” command | Exploitation statusNot confirmed | FixNo | Affected productBrocade Fabric OS | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31429Multiple commands print sensitive information in the terminal | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31428CLI allows upload or transfer files of dangerous types | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31427Knowledge of full path name | Exploitation statusNot confirmed | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityHigh |
|---|
CVE-2023-31426scp, sftp, ftp servers passwords in supportsave | Exploitation statusNot exploited | FixNo | Affected productBrocade Fabric OS | Published08/01/2023 | SeverityMedium |
|---|
CVE-2023-31425Privilege escalation via the fosexec command | Exploitation statusNot exploited | FixNo | Affected productFabric OS | Published08/01/2023 | SeverityHigh |
|---|
CVE-2022-33187Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs | Exploitation statusNot exploited | FixNo | Affected productBrocade SANnav | Published12/09/2022 | SeverityMedium |
|---|
CVE-2021-27798privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x | Exploitation statusNot exploited | FixNo | Affected productBrocade Fabric OS | Published08/05/2022 | SeverityUnknown |
|---|
CVE-2019-16204CVE-2019-16204 | Exploitation statusNot confirmed | FixNo | Affected productBrocade Fabric OS | Published02/05/2020 | SeverityUnknown |
|---|
CVE-2019-16203CVE-2019-16203 | Exploitation statusNot confirmed | FixNo | Affected productBrocade Fabric OS | Published02/05/2020 | SeverityUnknown |
|---|
150 Results | Page 3 of 3