Product by Brocade
Brocade SANnav
21 known vulnerabilities in Brocade SANnav (Brocade), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-82370 | Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service | — | |
| High | CVE-2026-82369 | Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a | — | |
| High | CVE-2026-82368 | Brocade SANnav: Improper Access Control | — | |
| Critical | CVE-2023-31424 | Web authentication and authorization bypass | 8.1 | |
| High | CVE-2026-82372 | Brocade SANnav: Insertion of Sensitive Information into Log File | — | |
| High | CVE-2026-82371 | Plaintext exposure of sensitive authentication data in SANnav discovery service log files | — | |
| High | CVE-2026-14443 | Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a | — | |
| Medium | CVE-2026-14441 | Logic flaw in SANnav Java cache key handling object comparison handling | — | |
| Medium | CVE-2022-43936 | Brocade Fabric OS switch passwords when debugging is enabled | 6.8 | |
| Medium | CVE-2026-14442 | Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a | — | |
| Medium | CVE-2026-85417 | Incomplete property masking in the SANnav logging subsystem | — | |
| High | CVE-2025-12772 | Plaintext Switch admin login password is seen in Brocade SANnav support save | 4.9 | |
| High | CVE-2025-12773 | Brocade SANnav: Generation of Error Message Containing Sensitive Information | 6.5 | |
| High | CVE-2022-43934 | Weak Key-exchange algorithms | 6.5 | |
| High | CVE-2025-12774 | SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0 | 7.5 | |
| High | CVE-2025-12679 | Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0 | 6.5 | |
| Medium | CVE-2022-43937 | Brocade SANnav Information Disclosure Vulnerability | 5.7 | |
| Medium | CVE-2025-12680 | Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680) | 4.9 | |
| Medium | CVE-2023-31423 | Possible information exposure through log file vulnerability | 5.7 | |
| Medium | CVE-2022-43933 | configuration secrets are logged in support-save | 4.4 | |
| Medium | CVE-2022-28161 | Brocade SANNav: Information Disclosure | 5.5 |