Brocade SANnav

• CVE-2026-85417 Medium 6.4 Incomplete property masking in the SANnav logging subsystem 0.2%
• CVE-2026-14441 Medium 6.9 Logic flaw in SANnav Java cache key handling object comparison handling 0.4%
• CVE-2026-14442 Medium 6.9 Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a 0.2%
• CVE-2026-14443 High 8.4 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a 0.1%
• CVE-2026-82372 High 8.5 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a 0.2%
• CVE-2026-82371 High 8.5 Plaintext exposure of sensitive authentication data in SANnav discovery service log files 0.1%
• CVE-2026-82370 High 8.6 Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service 0.6%
• CVE-2026-82369 High 8.6 Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a 0.4%
• CVE-2026-82368 High 8.7 Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local 0.3%
• CVE-2025-12774 Medium 4.6 SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0 0.2%
• CVE-2025-12773 High 7.1 Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a 0.4%
• CVE-2025-12772 High 8.5 Plaintext Switch admin login password is seen in Brocade SANnav support save 0.3%
• CVE-2025-12679 High 7.1 Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0 0.2%
• CVE-2025-12680 Medium 6.0 Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680) 0.2%
• CVE-2022-43937 Medium 5.7 Brocade SANnav Information Disclosure Vulnerability 0.5%
• CVE-2022-43936 Medium 6.8 Brocade Fabric OS switch passwords when debugging is enabled 0.8%
• CVE-2022-43935 Medium 5.3 Switch passwords and authorization IDs are printed in the embedded MLS DB file 0.2%
• CVE-2022-43934 Medium 6.5 Weak Key-exchange algorithms 0.5%
• CVE-2022-43933 Medium 4.4 configuration secrets are logged in support-save 0.3%
• CVE-2023-31424 High 8.1 Web authentication and authorization bypass 0.9%
• CVE-2023-31423 Medium 5.7 Possible information exposure through log file vulnerability 0.2%